Skip to content

fix(teardown): add az OIDC login + tolerate missing azd state #16

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
emmanuelknafo merged 1 commit into from
Jun 3, 2026
Merged

fix(teardown): add az OIDC login + tolerate missing azd state #16

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 15 additions & 4 deletions .github/workflows/teardown.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,24 +34,35 @@ jobs:
- name: Install azd
uses: Azure/setup-azd@v2

- name: Azure login (OIDC)
uses: azure/login@v2
with:
client-id: ${{ secrets.AZURE_CLIENT_ID }}
tenant-id: ${{ secrets.AZURE_TENANT_ID }}
subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

- name: azd auth login (OIDC)
run: |
azd auth login \
--client-id "$AZURE_CLIENT_ID" \
--tenant-id "$AZURE_TENANT_ID" \
--federated-credential-provider github

- name: azd env select
- name: azd env select (re-hydrate or create)
run: |
azd env select "$AZURE_ENV_NAME" || \
azd env new "$AZURE_ENV_NAME" \
--no-prompt \
--subscription "$AZURE_SUBSCRIPTION_ID"

- name: azd down --purge --force
run: azd down --environment "$AZURE_ENV_NAME" --purge --force --no-prompt
# Tolerate missing/partial azd state — the RG delete below is the real safety net.
- name: azd down --purge --force (best effort)
continue-on-error: true
run: azd down --environment "$AZURE_ENV_NAME" --purge --force --no-prompt || true

# Belt-and-braces fallback if azd state was missing or partial.
- name: Force RG delete (no-op if already gone)
if: always()
run: az group delete --name "rg-$AZURE_ENV_NAME" --yes --no-wait || true
run: |
az account set --subscription "$AZURE_SUBSCRIPTION_ID"
az group delete --name "rg-$AZURE_ENV_NAME" --yes --no-wait || true
Loading