feat(ci-cd): use direct federation #5

	name: Deploy Xplorers API to GCP

	on: push
	# push:
	# branches: [ "main" ]
	# pull_request:

	permissions:
	contents: read
	id-token: write

	jobs:
	deploy-xplorers-api:
	name: Deploy Xplorers API to GCP
	runs-on: ubuntu-latest

	defaults:
	run:
	shell: bash

	env:
	TERRAFORM_WORKSPACE: prod

	steps:
	# Checkout the repository to the GitHub Actions runner
	- name: Checkout
	uses: actions/checkout@v4

	- id: auth
	uses: google-github-actions/[email protected]
	with:
	workload_identity_provider: ${{ secrets.GOOGLE_CLOUD_WORKLOAD_IDENTITY_PROVIDER }}
	# service_account: ${{ secrets.GOOGLE_CLOUD_WORKLOAD_IDP_SERVICE_ACCOUNT }}

	- name: Setup Terraform
	uses: hashicorp/setup-terraform@v1

	- name: Install taskfile
	run: \|
	sudo snap install task --classic

	- name: Terraform Apply
	# if: github.ref == 'refs/heads/"main"' && github.event_name == 'push'
	run: task terraform-apply

Provide feedback