From 4ff1daa72df14a9b39b7f4e1a47e7b8efc91f5e4 Mon Sep 17 00:00:00 2001 From: Pouyan Jahangiri Date: Mon, 29 Jun 2026 02:37:16 -0700 Subject: [PATCH] ci: auto-deploy to Azure on push to main MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The GitHub OIDC → Azure federated credential and the deploy secrets/variables are now configured (docs/deploy-azure.md §5), so the Deploy (Azure) workflow can run unattended. Add a push-on-main trigger alongside the existing manual workflow_dispatch, so merges to main roll out the web + relay Container Apps. --- .github/workflows/deploy.yml | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index fc20d08..b917202 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -4,13 +4,12 @@ name: Deploy (Azure) # Container Apps. Auth is GitHub OIDC → Azure (no stored password). See docs/deploy-azure.md for the # one-time setup (Entra app + federated credential + role assignment + the repo secrets/vars below). # -# Manual-only for now (run it from the Actions tab). Once the Azure OIDC secrets exist (docs/deploy-azure.md -# §5), add a `push:` trigger here to auto-deploy on merge to main: -# on: -# push: { branches: [main] } -# workflow_dispatch: +# Auto-deploys on every push to main (the GitHub OIDC → Azure secrets are configured — see +# docs/deploy-azure.md §5), and can also be run manually from the Actions tab. on: + push: + branches: [main] workflow_dispatch: # Avoid overlapping deploys racing the same apps.