name: Deploy infrastructure

on:
  push:
    paths-ignore:
      - src/**
    branches:
      - main
  pull_request:
    paths-ignore:
      - src/**
    types: [opened, synchronize, reopened, closed]
    branches:
      - main

permissions:
  id-token: write
  contents: read

jobs:
  production:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          sparse-checkout: |
            infrastructure

      - name: Az CLI login
        uses: azure/login@v2
        with:
          client-id: ${{ secrets.CALQUE_PRD_CLIENT_ID }}
          tenant-id: ${{ secrets.CALQUE_PRD_TENANT_ID }}
          subscription-id: ${{ secrets.CALQUE_PRD_SUBSCRIPTION_ID }}

      - name: Deploy bicep
        uses: Azure/cli@v2
        with:
          azcliversion: 2.66.0
          inlineScript: |
            az deployment sub create --location westeurope --template-file infrastructure/main.bicep --parameters infrastructure/params/prod.bicepparam