Pass config through

dddwa · Aug 20, 2024 · 741ceec · 741ceec
1 parent c7474f2
commit 741ceec
Show file tree

Hide file tree

Showing 3 changed files with 16 additions and 0 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -25,6 +25,7 @@ jobs:
             AZURE_LOCATION: australiaeast
             AZURE_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
             AZURE_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
+            # TODO Replace this PAT with a GitHub App
             GH_CONTENT_TOKEN: ${{ secrets.GH_CONTENT_TOKEN }}
 
         steps:

diff --git a/infra/app/ddd.bicep b/infra/app/ddd.bicep
@@ -9,6 +9,8 @@ param containerAppsEnvironmentName string
 param applicationInsightsName string
 param gitHubOrganization string
 param gitHubRepo string
+@secure()
+param gitHubToken string
 param exists bool
 
 resource identity 'Microsoft.ManagedIdentity/userAssignedIdentities@2023-01-31' = {
@@ -70,7 +72,12 @@ resource app 'Microsoft.App/containerApps@2024-03-01' = {
           identity: identity.id
         }
       ]
+      secrets: [
+        name: 'github-token'
+        value: gitHubToken
+      ]
     }
+    secrets
     template: {
       containers: [
         {
@@ -92,8 +99,13 @@ resource app 'Microsoft.App/containerApps@2024-03-01' = {
             {
                 name: 'GITHUB_REPO',
                 value: gitHubRepo
+            },
+            {
+                name: 'GITHUB_TOKEN',
+                secretRef: 'github-token'
             }
           ]
+
           resources: {
             cpu: json('1.0')
             memory: '2.0Gi'

diff --git a/infra/main.bicep b/infra/main.bicep
@@ -109,6 +109,9 @@ module ddd './app/ddd.bicep' = {
     containerRegistryName: registry.outputs.name
     exists: dddExists
     environment: environmentName
+    gitHubOrganization: gitHubOrganization
+    gitHubRepo: gitHubRepo
+    gitHubToken: gitHubToken
   }
   scope: rg
 }