README

To run CI/CD you must:

Add the backend values to the secrets:

TFSTATE_STORAGE_ACCOUNT_NAME
TFSTATE_STORAGE_CONTAINER_NAME
TFSTATE_KEY
TFSTATE_RESOURCES_GROUP_NAME

With Service Principal Name (SPN)

Create an SPN with the Storage Blob Data Owner role on the storage account.

On the GitHub repository add SPN credentials:

ARM_SPN_CLIENT_ID
ARM_SPN_CLIENT_SECRET
ARM_SUBSCRIPTION_ID
ARM_TENANT_ID

Create an application registration
Add federated credentials inside secrets and credentials
Choose GitHub action and select the owner / repository. You can specify a branch but the best approach is to specify an environment which exist inside your GitHub repository.
Add Storage Blob Data Owner role on the storage account to your application registration

On the GitHub repository add the credentials:

ARM_CLIENT_ID => The App Registration one
ARM_SUBSCRIPTION_ID
ARM_TENANT_ID