Sdaf Gh Workflow Sequence

Azure/sap-automation-gh-bootstrap/skills/sdaf-gh-workflow-sequence

Multi-file

Azure· v1.0.0

devopsOfficial

Official Provider SkillView repo

Context-primer for the SDAF GitHub Actions workflow catalogue: the ordered sequence `00`-`12`, each workflow's `workflow_dispatch` inputs, which workflows commit generated tfvars to `main` (`00`, `02`, `04`) and which create GitHub Environments (`00` control-plane, `02` workload-zone — `04` deliberately does not), which workflows run on `self-hosted` runners (`01` deploy-control-plane and later, plus `06`, `06.5`, `10`, `12`), which support genuine plan-only via `test` (per current docs), and th

Files2 files

SKILL.md114 lines

Loading editor…

Install

Recommended

One command — your agent picks it up automatically.

Select AI agent

Select an AI agent above to see the install command.

Manual Install

More steps

Download the archive and add the files to your project manually.

Skill details

Versionv1.0.0

AuthorAzure

Categorydevops

Skill IDAzure/sap-automation-gh-bootstrap/skills/sdaf-gh-workflow-sequence

Files2 files

Related skills

Sdaf Gh BootstrapAction-loop skill for bootstrapping the SDAF GitHub Actions surface: create the configuration repo from `Azure/sap-automation-gh-bootstrap`, set the pre-workflow-`00` repository variables (`ARM_ENVIRONMENT`, `AZURE_ENVIRONMENT`, `AZURE_AUDIENCE`), run the SDAF setup utility from `Azure/sap-automation` (which creates the GitHub App, repo vars/secrets, Azure identity, and the first control-plane Environment), then dispatch workflow `00-create-environment.yml` to generate and commit `WORKSPACES/DEP Sdaf Gh Oidc And AuthAction-loop skill for authenticating the SDAF GitHub Actions workflows to Azure. Two independent layers must both be right: (1) `azure/login` uses an OIDC federated credential and reads `AZURE_ENVIRONMENT` + `AZURE_AUDIENCE`; (2) Terraform and Ansible authenticate separately via either a managed identity (`USE_MSI=true`, `MSI_ID`) or a service principal with `ARM_CLIENT_SECRET`, and always read `ARM_ENVIRONMENT`. This skill resolves `AADSTS7002381` (enterprise-claim tenant policy), `AADSTS700021 Asim Parser La DeployerGets the ASIM parser of interest and deploys it to the customer's LA workspace.Az Cli Command RunnerRuns Azure CLI commands in a terminal. Use this skill when you need to execute az CLI commands such as checking authentication, querying Log Analytics, managing deployments, or inspecting Azure resources.Dpg MigrationMigration logic for Azure SDK for .NET data-plane libraries migrating from AutoRest/Swagger to TypeSpec-based generation. Uses MCP tools from the generator-agent server for automated deterministic fixes.Openspec Archive ChangeArchive a completed change in the experimental workflow. Use when the user wants to finalize and archive a change after implementation is complete.