chore: script federated credentials for github actions deploy to azure

.github/workflows/review-api.yaml

@@ -6,6 +6,7 @@ on:
       - review-api/**
       - .github/workflows/review-api.yaml
       - scripts/az-bootstrap-containerapp.bash
+  workflow_dispatch:
 
 permissions:
   # required for federated credentials to access azure

.github/workflows/room-api.yaml

@@ -6,6 +6,7 @@ on:
       - room-api/**
       - .github/workflows/room-api.yaml
       - scripts/az-bootstrap-containerapp.bash
+  workflow_dispatch:
 
 permissions:
   # required for federated credentials to access azure

scripts/az-create-federated-credentials-for-deploy.bash

@@ -0,0 +1,40 @@
+#!/bin/bash
+set -eo pipefail
+
+printf 'Creating app for dev\n'
+#az ad app create --display-name christianfosli/stellerom-dev
+sleep 2
+appId="$(az ad app list --display-name christianfosli/stellerom-dev --query [0].appId -o tsv)"
+#az ad sp create --id "$appId"
+
+printf 'Creating federated credentials for GitHub Actions\n'
+cat << EOF > creds.json
+{
+  "name": "github-actions-dev",
+  "issuer": "https://token.actions.githubusercontent.com",
+  "subject": "repo:christianfosli/stellerom:environment:Development",
+  "description": "Deploy to azure from GitHub actions",
+  "audiences": ["api://AzureADTokenExchange"]
+}
+EOF
+az ad app federated-credential create --id "$appId" --parameters creds.json
+
+printf 'Creating app for prod\n'
+#az ad app create --display-name christianfosli/stellerom-prod
+sleep 2
+appId="$(az ad app list --display-name christianfosli/stellerom-prod --query [0].appId -o tsv)"
+#az ad sp create --id "$appId"
+
+printf 'Creating federated credentials for GitHub Actions\n'
+cat << EOF > creds.json
+{
+  "name": "github-actions-prod",
+  "issuer": "https://token.actions.githubusercontent.com",
+  "subject": "repo:christianfosli/stellerom:environment:Production",
+  "description": "Deploy to azure from GitHub actions",
+  "audiences": ["api://AzureADTokenExchange"]
+}
+EOF
+az ad app federated-credential create --id $appId --parameters creds.json
+
+printf '!!MANUAL STEP: Assign permissions in Azure portal\n'