ROX-12480: Add a deploy workflow file for production. (#597)

* Add a deploy workflow file for production.

* Shorten names so they fit better in GH UI

Author: porridge

.github/workflows/deploy-production.yaml

@@ -0,0 +1,72 @@
+name: Deploy Prod Env
+
+on:
+  push:
+    branches:
+      - production
+
+jobs:
+  cancel:
+    name: Cancel previous runs
+    runs-on: ubuntu-latest
+    steps:
+      - name: Cancel Previous Runs
+        uses: n1hility/cancel-previous-runs@v2
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+  terraform:
+    name: Re-terraform production clusters
+    needs: cancel
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
+    environment: production
+    steps:
+      - name: Set up Go 1.18
+        uses: actions/setup-go@v3
+        with:
+          go-version: "1.18"
+      - name: Checkout
+        uses: actions/checkout@v3
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v1-node16
+        with:
+          aws-region: ${{ secrets.AWS_REGION }}
+          role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/github
+      - name: Run terraforming on THE production cluster
+        working-directory: ./dp-terraform/helm/rhacs-terraform
+        env:
+          USE_AWS_VAULT: false
+        run: |
+          set -euo pipefail
+          ./terraform_cluster.sh prod acs-prod-dp-01
+
+  deploy-probe:
+    name: Deploy blackbox monitoring probe service to production
+    needs: cancel
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
+    environment: production
+    steps:
+      - name: Set up Go 1.18
+        uses: actions/setup-go@v3
+        with:
+          go-version: "1.18"
+      - name: Checkout
+        uses: actions/checkout@v3
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v1-node16
+        with:
+          aws-region: ${{ secrets.AWS_REGION }}
+          role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/github
+      - name: Deploy probe
+        working-directory: ./deploy/helm/probe
+        env:
+          USE_AWS_VAULT: false
+        run: |
+          set -euo pipefail
+          ./deploy.sh prod acs-prod-dp-01

.github/workflows/deploy-stage.yaml

@@ -1,4 +1,4 @@
-name: Deploy Stage Environment
+name: Deploy Stage Env
 
 on:
   push:
@@ -44,7 +44,7 @@ jobs:
           ./terraform_cluster.sh stage acs-stage-dp-01
 
   deploy-probe:
-    name: Deploy blackbox monitoring probe service
+    name: Deploy blackbox monitoring probe service to stage
     needs: cancel
     runs-on: ubuntu-latest
     permissions: