azure-keyvault-secrets-dispatch.yml

name: "azure-11-dispatch-add-secrets-to-keyvault"


on:
  workflow_dispatch:
    inputs:
      resourceGroupName:
        description: "The name of the resource group to create the kv in"
        required: true
      vaultName:
        description: "The name of the key vault"
        required: true
      secretMap:
        description: "A string format of the keys/secrets to add to the vault"
        required: true
        default: '{"example":"secret","secret2":"secret"}'
      stateName:
        description: "A unique string name to use for tfstate (e.g., acr)"
        required: true
      action:
        required: true
        type: choice
        description: "Create (new) or destroy (existing)"
        options:
        - create
        - destroy

jobs:
  update-kv-secrets:
    uses: ./.github/workflows/azure-keyvault-secrets.yml
    with:
      resourceGroupName: ${{ github.event.inputs.resourceGroupName }}
      vaultName: ${{ github.event.inputs.vaultName }}
      stateName: ${{ github.event.inputs.stateName }}
      action: ${{ github.event.inputs.action }}
    secrets:
      secretMap: ${{ github.event.inputs.secretMap }}
      AZURE_AD_CLIENT_ID: ${{ secrets.AZURE_AD_CLIENT_ID }}
      AZURE_AD_CLIENT_SECRET: ${{ secrets.AZURE_AD_CLIENT_SECRET }}
      AZURE_SUBSCRIPTION_ID: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
      AZURE_AD_TENANT_ID: ${{ secrets.AZURE_AD_TENANT_ID }}
      TF_BACKEND_RESOURCE_GROUP_NAME: ${{ secrets.TF_BACKEND_RESOURCE_GROUP_NAME }}
      TF_BACKEND_STORAGE_ACCOUNT_NAME: ${{ secrets.TF_BACKEND_STORAGE_ACCOUNT_NAME }}
      TF_BACKEND_STORAGE_CONTAINER_NAME:  ${{ secrets.TF_BACKEND_STORAGE_CONTAINER_NAME }}