Deployment to production

[RobertGHippo]

Description

Deploy IaC/Terraform to production.

Ticket number

EYQB-345

Changes

• New job in pipeline, deploy to production (copy of deploy to staging)
• Removed as_service_principal_object_id variable (principal identity can be read directly from the web app)
• Ignore changes to tags set automatically by policy: "Environment", "Product", "Service Offering"
• A couple of instances of ignoring changes to tenant_id (it's very unlikely that it'll change between two automated deployments)
• Removed some key vault access policies that were duplicates that got in each other's way
• Removed deprecated send_to_subscription_administrator and send_to_subscription_co_administrator notifications

How Has This Been Tested?

Deployed both dev and staging from pipeline; a couple of outstanding tasks before it can be deployed fully to production (DNS records, certificate generation), but no need to wait for those.

Checklist:

• My code follows the standards used within this project
• I have performed a self-review of my code
• I have made corresponding changes to the documentation
• My changes generate no new warnings
• I have added tests (Unit, E2E) that prove my fix is effective or that my feature works
• New and existing unit tests pass locally with my changes
• Any dependent changes have been merged and published in downstream modules

[github-actions]

Package	Line Rate	Branch Rate	Health
Dfe.EarlyYearsQualification.Web	95%	89%	✔
Dfe.EarlyYearsQualification.Content	91%	91%	✔
Dfe.EarlyYearsQualification.Mock	100%	95%	✔
Summary	95% (2462 / 2598)	90% (349 / 386)	✔

Minimum allowed line rate is 90%