deployment-config-in-repo

Type: decision

Decision

Every GitHub variable the platform uses is defined in the repo, never created ad hoc.

Why

BigBang destroys and recreates GitHub environments — without repo-committed variables, the platform state cannot be reproduced.

Violations

• Bicep parameter with hardcoded tenant ID or location instead of readEnvironmentVariable().
• GitHub variable created in UI.

Links

• landing-zone-platform-members — Member registration creates the initial repo variables — without it, landing zones have no baseline to drive from.
• platform-identity-azure — The app registration has distinct client IDs per environment — each must appear as a GitHub variable.

← Back to knowledge graph