environment-bootstrap

Automate Azure environment setup for CI/CD pipelines with OIDC federation.

Updated Mar 16, 2026

Search Tags:#ci/cd #azure #terraform #oidc #key vault #environment promotion

Ready to run

npx skills add https://github.com/ivegamsft/work-tracker --skill environment-bootstrap-ivegamsft

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: environment-bootstrap
Source: https://github.com/ivegamsft/work-tracker/tree/main/.agents/skills/environment-bootstrap
Command: npx skills add https://github.com/ivegamsft/work-tracker --skill environment-bootstrap-ivegamsft

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires azure-cli, terraform, bicep, github-actions, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the setup of secure, reproducible Azure environments for CI/CD pipelines, handling OIDC federation, state storage, Key Vault, and environment promotion.

Core Features & Use Cases

OIDC Federation: Configures workload identity federation for GitHub Actions.
State Storage: Sets up Terraform and Bicep deployment state backends with encryption.
Key Vault Provisioning: Automates Azure Key Vault creation with RBAC policies.
GitHub Actions Secrets: Integrates environment secrets with GitHub Actions.
Environment Promotion: Establishes dev→staging→prod promotion pipelines.
Workload Identity: Enables service principals with federated identity for pod-level authentication.
Use Case: For a CI/CD pipeline, use this Skill to automate the setup of Azure resources, ensuring secure access and consistent environments for development, testing, and production.

Quick Start

Use the environment-bootstrap skill to set up your Azure CI/CD environment.

Frequently Asked Questions about environment-bootstrap

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I configure OIDC federation for GitHub Actions deploying to Azure?▼

To configure OIDC federation for GitHub Actions, this Skill automates the setup of workload identity federation, enabling secure authentication to Azure without storing secrets. It establishes federated identity credentials for your deployment pipelines.

What's the best way to automate Azure environment setup for CI/CD pipelines?▼

Automating Azure environment setup for CI/CD pipelines is best handled by configuring state storage, Key Vault, and environment promotion together. This Skill provisions these components securely using Terraform and Bicep to ensure reproducible environments.

Do I need Terraform and Bicep to set up Azure deployment state backends?▼

Yes, you need Terraform and Bicep to establish Azure deployment state backends using this Skill. It relies on both infrastructure as code tools to configure encrypted state storage for your automated deployment workflows.

Can I automate Azure Key Vault creation and RBAC policies for GitHub Actions?▼

Yes, you can automate Azure Key Vault creation with RBAC policies for GitHub Actions. This Skill provisions Key Vault with role-based access control and integrates environment secrets directly into your deployment workflows.

How do I establish dev to staging to prod environment promotion pipelines in Azure?▼

To establish dev to staging to prod environment promotion pipelines in Azure, this Skill configures automated deployment workflows across your environments. It ensures consistent configuration and secure access for development, testing, and production.