add openhack files

support/sqlsecretrotation/.github/workflows/workflow.bicep.sqlsecrot.yml

@@ -0,0 +1,66 @@
+name: "Deploy - sqlsecrot (Bicep)"
+
+# run manually
+on:
+  workflow_dispatch:
+
+# Set envs
+env:
+  WORKDIR: "support/sqlsecretrotation/iac/bicep"
+  RESOURCES_SUFFIX: "sqlsecrot"
+  # RESOURCES_PREFIX: "devopsoh44707" # hardcoded or dynamic based on repo name
+  # LOCATION: "westus2" # hardcoded or get from secrets
+
+# Set defaults for GitHub Actions runner
+defaults:
+  run:
+    working-directory: "support/sqlsecretrotation/iac/bicep"
+
+jobs:
+  deploy:
+    name: "Deploy"
+    runs-on: ubuntu-latest
+
+    steps:
+      # Checkout the repository to the GitHub Actions runner
+      - name: Checkout
+        uses: actions/checkout@v2
+
+      # Get RESOURCES_PREFIX based on the repo name
+      - name: Get repo name
+        uses: actions/github-script@v5
+        id: resources_prefix
+        with:
+          result-encoding: string
+          script: return context.repo.repo.toLowerCase()
+
+      # Concat RG name
+      - name: Get resource group name
+        uses: actions/github-script@v5
+        id: resource_group_name
+        with:
+          result-encoding: string
+          script: |
+            const { RESOURCES_SUFFIX } = process.env
+            const repo_name = "${{ steps.resources_prefix.outputs.result }}"
+            return `${repo_name}${RESOURCES_SUFFIX}rg`
+
+      # Login to Azure with Service Principal
+      - name: "Azure Login"
+        uses: Azure/login@v1
+        with:
+          creds: ${{ secrets.AZURE_CREDENTIALS }}
+
+      # Deploy
+      - name: "Deploy"
+        uses: Azure/cli@1.0.4
+        with:
+          inlineScript: |
+            if [ $(az group exists --name ${{ steps.resource_group_name.outputs.result }}) = false ]; then
+              az group create --name ${{ steps.resource_group_name.outputs.result }} --location ${{ secrets.LOCATION }}
+            fi
+            az deployment group create \
+            --name ${{ github.run_id }} \
+            --resource-group ${{ steps.resource_group_name.outputs.result }} \
+            --template-file ${{ env.WORKDIR }}/main.bicep \
+            --parameters keyVaultRgName='${{ steps.resources_prefix.outputs.result }}rg' keyVaultName='${{ steps.resources_prefix.outputs.result }}kv' resourcesPrefix='${{ steps.resources_prefix.outputs.result }}' resourcesSuffix='${{ env.RESOURCES_SUFFIX }}'