demo-az-pipeline.yml

name: Demo - Azure Infrastructure Deployment Pipeline

on:
  push:
    branches: [ main, develop, demo ]
  pull_request:
    branches: [ main ]
  workflow_dispatch:
    inputs:
      environment:
        description: 'Target Environment'
        required: true
        default: 'development'
        type: choice
        options:
          - development
          - staging
          - production
      simulate_failure:
        description: 'Simulate a failure (for demo purposes)'
        required: false
        default: 'none'
        type: choice
        options:
          - none
          - jira
          - change_request
          - terraform
          - post_deploy

jobs:
  check-jira:
    name: 🎫 Check Jira
    runs-on: ubuntu-latest
    outputs:
      jira_issue_id: ${{ steps.get-issue.outputs.issue_id }}
      finops_story_id: ${{ steps.get-finops-story.outputs.story_id }}
      finops_tags: ${{ steps.get-finops-tags.outputs.tags }}
    steps:
      - name: 📥 Checkout code
        uses: actions/checkout@v4

      - name: 🔍 Simulate Jira API Failure
        if: inputs.simulate_failure == 'jira'
        run: |
          echo "❌ Simulating Jira API connection failure..."
          exit 1

      - name: 🎯 Get FinOpsStory Details
        id: get-issue
        run: |
          echo "🔍 Extracting Jira issue from commit message..."
          sleep 2
          
          # Simulate extracting issue from commit
          ISSUE_KEY="FINOPS-$(shuf -i 100-999 -n 1)"
          echo "issue_id=${ISSUE_KEY}" >> $GITHUB_OUTPUT
          echo "✅ Found Jira Issue: ${ISSUE_KEY}"

      - name: 🏷️ Get Child FinOps Tag Story ID
        id: get-finops-story
        run: |
          echo "🔍 Querying Jira for child FinOps stories..."
          sleep 2
          
          # Simulate finding child story
          PARENT="${{ steps.get-issue.outputs.issue_id }}"
          CHILD_STORY="${PARENT}-FINOPS"
          echo "story_id=${CHILD_STORY}" >> $GITHUB_OUTPUT
          echo "✅ Found FinOps Story: ${CHILD_STORY}"

      - name: 📋 Get ChildStory Details
        run: |
          echo "📄 Fetching detailed story information from Jira..."
          echo "  - Story Points: 5"
          echo "  - Sprint: Infrastructure Q1"
          echo "  - Assignee: Platform Team"
          sleep 1

      - name: 🏷️ Get FinOps Tags
        id: get-finops-tags
        run: |
          echo "🏷️ Extracting FinOps tags from Jira custom fields..."
          sleep 2
          
          # Simulate tag extraction
          TAGS_JSON=$(jq -n \
            --arg env "${{ inputs.environment || 'development' }}" \
            '{
              "CostCenter": "IT-001",
              "ProjectCode": "FINOPS-2024",
              "Department": "Platform-Engineering",
              "Environment": $env,
              "Owner": "platform-team@company.com",
              "Purpose": "Demo-Pipeline"
            }')
          
          # Use delimiter to handle multiline output safely
          echo "tags<<EOF" >> $GITHUB_OUTPUT
          echo "$TAGS_JSON" >> $GITHUB_OUTPUT
          echo "EOF" >> $GITHUB_OUTPUT
          
          echo "✅ FinOps Tags collected:"
          echo "$TAGS_JSON" | jq .

      - name: 🏢 Check IIC Project Status
        id: check-iic
        run: |
          echo "🔍 Checking if this is an IIC project..."
          
          # Simulate IIC project detection (check commit message or project code)
          COMMIT_MSG="${{ github.event.head_commit.message || 'demo commit' }}"
          if [[ "$COMMIT_MSG" == *"IIC"* ]] || [[ "${{ needs.check-jira.outputs.jira_issue_id }}" == *"IIC"* ]]; then
            echo "is_iic=true" >> $GITHUB_OUTPUT
            echo "✅ IIC project detected"
          else
            echo "is_iic=false" >> $GITHUB_OUTPUT
            echo "ℹ️ Not an IIC project"
          fi

      - name: 🏢 Get Additional IIC Tags
        if: steps.check-iic.outputs.is_iic == 'true'
        run: |
          echo "🏷️ Adding IIC-specific tags..."
          echo "  📋 Compliance Level: High"
          echo "  🔒 Security Classification: Restricted"
          echo "  📊 Audit Required: Yes"
          echo "✅ IIC tags configured"

  release-variables-setup:
    name: 🔧 Release Variables Setup
    runs-on: ubuntu-latest
    needs: check-jira
    outputs:
      resource_group_name: ${{ steps.generate-names.outputs.resource_group_name }}
      naming_prefix: ${{ steps.generate-names.outputs.naming_prefix }}
      vm_names: ${{ steps.generate-vm-names.outputs.vm_names }}
      timestamp: ${{ steps.generate-names.outputs.timestamp }}
    steps:
      - name: 🏷️ Generate Azure Names
        id: generate-names
        run: |
          echo "🎯 Generating standardized Azure resource names..."
          
          # Generate demo names
          TIMESTAMP=$(date +%Y%m%d%H%M%S)
          ENV_SHORT="${{ inputs.environment || 'dev' }}"
          ENV_SHORT=${ENV_SHORT:0:3}
          
          NAMING_PREFIX="demo-${ENV_SHORT}-${TIMESTAMP:0:8}"
          RG_NAME="rg-${NAMING_PREFIX}"
          
          echo "resource_group_name=${RG_NAME}" >> $GITHUB_OUTPUT
          echo "naming_prefix=${NAMING_PREFIX}" >> $GITHUB_OUTPUT
          echo "timestamp=${TIMESTAMP}" >> $GITHUB_OUTPUT
          
          echo "✅ Generated naming convention:"
          echo "  📁 Resource Group: ${RG_NAME}"
          echo "  🏷️ Naming Prefix: ${NAMING_PREFIX}"
          sleep 1

      - name: 🖥️ Generate Bastion VM Name
        id: generate-bastion
        run: |
          PREFIX="${{ steps.generate-names.outputs.naming_prefix }}"
          BASTION_NAME="vm-bastion-${PREFIX}"
          echo "bastion_name=${BASTION_NAME}" >> $GITHUB_OUTPUT
          echo "✅ Bastion VM: ${BASTION_NAME}"

      - name: 🌐 Generate Web VM Name(s)
        id: generate-web
        run: |
          echo "🖥️ Generating Web VM names..."
          PREFIX="${{ steps.generate-names.outputs.naming_prefix }}"
          
          WEB_NAMES=()
          for i in {1..3}; do
            NAME="vm-web-${PREFIX}-${i}"
            WEB_NAMES+=("${NAME}")
            echo "  ✓ ${NAME}"
          done
          
          WEB_JSON=$(printf '%s\n' "${WEB_NAMES[@]}" | jq -R . | jq -s .)
          echo "web_names<<EOF" >> $GITHUB_OUTPUT
          echo "$WEB_JSON" >> $GITHUB_OUTPUT
          echo "EOF" >> $GITHUB_OUTPUT

      - name: 📱 Generate App VM Name(s)
        id: generate-app
        run: |
          echo "🖥️ Generating App VM names..."
          PREFIX="${{ steps.generate-names.outputs.naming_prefix }}"
          
          APP_NAMES=()
          for i in {1..2}; do
            NAME="vm-app-${PREFIX}-${i}"
            APP_NAMES+=("${NAME}")
            echo "  ✓ ${NAME}"
          done
          
          APP_JSON=$(printf '%s\n' "${APP_NAMES[@]}" | jq -R . | jq -s .)
          echo "app_names<<EOF" >> $GITHUB_OUTPUT
          echo "$APP_JSON" >> $GITHUB_OUTPUT
          echo "EOF" >> $GITHUB_OUTPUT

      - name: 🗄️ Generate DB VM Name(s) - Windows
        id: generate-db-win
        run: |
          PREFIX="${{ steps.generate-names.outputs.naming_prefix }}"
          DB_WIN_NAME="vm-db-win-${PREFIX}"
          echo "db_win_name=${DB_WIN_NAME}" >> $GITHUB_OUTPUT
          echo "✅ Windows DB VM: ${DB_WIN_NAME}"

      - name: 🐧 Generate DB VM Name(s) - Linux
        id: generate-db-linux
        run: |
          PREFIX="${{ steps.generate-names.outputs.naming_prefix }}"
          DB_LINUX_NAME="vm-db-linux-${PREFIX}"
          echo "db_linux_name=${DB_LINUX_NAME}" >> $GITHUB_OUTPUT
          echo "✅ Linux DB VM: ${DB_LINUX_NAME}"

      - name: 📋 Add Credentials (Compile VM Names)
        id: generate-vm-names
        run: |
          echo "📋 Compiling all VM names..."
          
          # Create a simple JSON structure without complex jq operations
          cat > vm-inventory.json << EOF
          {
            "bastion": "${{ steps.generate-bastion.outputs.bastion_name }}",
            "web": [
              "vm-web-${{ steps.generate-names.outputs.naming_prefix }}-1",
              "vm-web-${{ steps.generate-names.outputs.naming_prefix }}-2",
              "vm-web-${{ steps.generate-names.outputs.naming_prefix }}-3"
            ],
            "app": [
              "vm-app-${{ steps.generate-names.outputs.naming_prefix }}-1",
              "vm-app-${{ steps.generate-names.outputs.naming_prefix }}-2"
            ],
            "db_windows": "${{ steps.generate-db-win.outputs.db_win_name }}",
            "db_linux": "${{ steps.generate-db-linux.outputs.db_linux_name }}"
          }
          EOF
          
          VM_NAMES=$(cat vm-inventory.json)
          
          # Use delimiter for multiline JSON output
          echo "vm_names<<EOF" >> $GITHUB_OUTPUT
          echo "$VM_NAMES" >> $GITHUB_OUTPUT
          echo "EOF" >> $GITHUB_OUTPUT
          echo "✅ VM inventory compiled successfully"
          sleep 1

  standard-charge-creation:
    name: 📝 Standard Charge Creation
    runs-on: ubuntu-latest
    needs: [check-jira, release-variables-setup]
    outputs:
      change_request_id: ${{ steps.create-cr.outputs.cr_number }}
    steps:
      - name: 📋 Create and Start Standard CR
        id: create-cr
        run: |
          echo "📝 Creating Standard Change Request in ServiceNow..."
          echo "  📄 Type: Standard"
          echo "  📋 Category: Infrastructure"
          echo "  🎯 Risk: Low"
          
          sleep 3
          
          # Generate demo CR number
          CR_NUMBER="CR-$(date +%Y%m%d)-$(shuf -i 1000-9999 -n 1)"
          
          echo "✅ Created Change Request: ${CR_NUMBER}"
          echo "  📍 Status: Draft"
          echo "  👤 Assigned to: CAB Team"
          echo "  📅 Implementation Window: Next 2 hours"
          
          echo "cr_number=${CR_NUMBER}" >> $GITHUB_OUTPUT

      - name: ⏳ Wait for CR to Start
        run: |
          echo "⏳ Waiting for Change Request approval..."
          echo "  🔄 Polling ServiceNow API..."
          
          # Simulate approval process
          for i in {1..5}; do
            echo "  ⏱️ Checking approval status... (${i}/5)"
            sleep 2
          done
          
          if [[ "${{ inputs.simulate_failure }}" == "change_request" ]]; then
            echo "❌ Change Request rejected by CAB"
            exit 1
          fi
          
          echo "✅ Change Request approved!"
          echo "  ✓ Approved by: CAB-AUTO"
          echo "  ✓ Implementation can proceed"

  build-azure-vms:
    name: 🖥️ Deploy Azure VMs
    runs-on: ubuntu-latest
    needs: [check-jira, release-variables-setup, standard-charge-creation]
    steps:
      - name: 📥 Checkout code
        uses: actions/checkout@v4

      - name: 🔧 Setup Terraform
        run: |
          echo "📦 Installing Terraform v1.5.0..."
          echo "✅ Terraform installed successfully"

      - name: 🔐 Azure Login
        run: |
          echo "🔐 Authenticating with Azure..."
          echo "  🔑 Using Service Principal"
          echo "  📍 Subscription: Demo-Subscription"
          echo "✅ Successfully authenticated to Azure"
          sleep 1

      - name: 🔄 Terraform Init
        run: |
          echo "🔄 Initializing Terraform..."
          echo "  📁 Working directory: ./terraform"
          echo "  🏪 Backend: Azure Storage Account"
          sleep 2
          echo "✅ Terraform initialized successfully"

      - name: 🔍 Terraform Validate
        run: |
          echo "🔍 Validating Terraform configuration..."
          echo "  📋 Checking syntax and structure"
          echo "  🔧 Validating provider configurations"
          sleep 2
          echo "✅ Terraform configuration is valid"

      - name: 📋 Terraform Plan
        run: |
          echo "📋 Creating Terraform execution plan..."
          echo "  🎯 Target Environment: ${{ inputs.environment || 'development' }}"
          echo "  📊 Analyzing current state vs desired state"
          sleep 3
          echo ""
          echo "📊 Plan Summary:"
          echo "  ➕ 25 resources to add"
          echo "  🔄 0 resources to change"
          echo "  ➖ 0 resources to destroy"
          echo ""
          echo "✅ Terraform plan completed successfully"

      - name: 🚀 Terraform Apply - Deploy Azure Resources
        run: |
          echo "🚀 Starting Terraform Apply..."
          echo ""
          echo "📋 Deployment Configuration:"
          echo "  📁 Resource Group: ${{ needs.release-variables-setup.outputs.resource_group_name }}"
          echo "  📍 Region: East US"
          echo "  🏷️ Tags: ${{ needs.check-jira.outputs.finops_tags }}"
          echo ""
          
          if [[ "${{ inputs.simulate_failure }}" == "terraform" ]]; then
            echo "❌ Terraform apply failed!"
            echo "Error: Error creating Virtual Machine: Code=\"OperationNotAllowed\""
            exit 1
          fi
          
          echo "🏗️ Executing Terraform apply..."
          echo ""
          
          # Step 1: Create Resource Group
          echo "📁 Creating Resource Group..."
          echo "  ✓ azurerm_resource_group.main"
          sleep 1
          
          # Step 2: Create Virtual Network & Subnets
          echo ""
          echo "🌐 Creating Virtual Network & Subnets..."
          echo "  ✓ azurerm_virtual_network.main (10.0.0.0/16)"
          echo "  ✓ azurerm_subnet.bastion (10.0.1.0/24)"
          echo "  ✓ azurerm_subnet.web (10.0.2.0/24)"
          echo "  ✓ azurerm_subnet.app (10.0.3.0/24)"
          echo "  ✓ azurerm_subnet.db (10.0.4.0/24)"
          sleep 2
          
          # Step 3: Create Network Security Groups
          echo ""
          echo "🔒 Creating Network Security Groups & Rules..."
          echo "  ✓ azurerm_network_security_group.bastion (SSH: 22)"
          echo "  ✓ azurerm_network_security_group.web (HTTP: 80, HTTPS: 443)"
          echo "  ✓ azurerm_network_security_group.app (Internal: 8080)"
          echo "  ✓ azurerm_network_security_group.db (SQL: 1433, MySQL: 3306)"
          sleep 2
          
          # Step 4: Create Bastion Host
          echo ""
          echo "🏰 Creating Bastion Host..."
          echo "  ✓ azurerm_public_ip.bastion"
          echo "  ✓ azurerm_network_interface.bastion"
          echo "  ✓ azurerm_linux_virtual_machine.bastion (Standard_B2s)"
          sleep 1
          
          # Step 5: Create Web Tier VMs
          echo ""
          echo "🌐 Creating Web Tier (3 VMs)..."
          echo "  ✓ azurerm_availability_set.web"
          echo "  ✓ azurerm_linux_virtual_machine.web[0] (Standard_B2s)"
          echo "  ✓ azurerm_linux_virtual_machine.web[1] (Standard_B2s)"
          echo "  ✓ azurerm_linux_virtual_machine.web[2] (Standard_B2s)"
          sleep 2
          
          # Step 6: Create App Tier VMs
          echo ""
          echo "📱 Creating App Tier (2 VMs)..."
          echo "  ✓ azurerm_availability_set.app"
          echo "  ✓ azurerm_linux_virtual_machine.app[0] (Standard_B4ms)"
          echo "  ✓ azurerm_linux_virtual_machine.app[1] (Standard_B4ms)"
          sleep 1
          
          # Step 7: Create Database VMs
          echo ""
          echo "💾 Creating Database Tier (2 VMs)..."
          echo "  ✓ azurerm_windows_virtual_machine.db_windows (Standard_D4s_v3)"
          echo "  ✓ azurerm_linux_virtual_machine.db_linux (Standard_D4s_v3)"
          sleep 1
          
          # Step 8: Create Key Vault
          echo ""
          echo "🔐 Creating Key Vault & Secrets..."
          echo "  ✓ azurerm_key_vault.main"
          echo "  ✓ azurerm_key_vault_secret.ssh_key"
          echo "  ✓ azurerm_key_vault_secret.admin_password"
          sleep 1
          
          # Step 9: Apply FinOps Tags
          echo ""
          echo "🏷️ Applying FinOps Tags to All Resources..."
          echo "  ✓ CostCenter: IT-001"
          echo "  ✓ ProjectCode: FINOPS-2024"
          echo "  ✓ Department: Platform-Engineering"
          echo "  ✓ Environment: ${{ inputs.environment || 'development' }}"
          echo "  ✓ Owner: platform-team@company.com"
          echo "  ✓ Purpose: Demo-Pipeline"
          sleep 2
          
          echo ""
          echo "✅ All Azure Resources deployed successfully!"
          echo ""
          echo "📊 Infrastructure Deployment Summary:"
          echo "  ✓ 1 Resource Group"
          echo "  ✓ 1 Virtual Network with 4 Subnets"
          echo "  ✓ 4 Network Security Groups"
          echo "  ✓ 1 Bastion Host (Public IP: 20.42.$(shuf -i 1-255 -n 1).$(shuf -i 1-255 -n 1))"
          echo "  ✓ 3 Web Servers (Load Balanced)"
          echo "  ✓ 2 App Servers (High Availability)"
          echo "  ✓ 2 Database Servers (Windows + Linux)"
          echo "  ✓ 1 Key Vault (Credentials Secured)"
          echo "  ✓ All resources tagged for FinOps compliance"

      - name: 📊 Generate Deployment Report
        if: always()
        run: |
          echo "📊 Generating deployment report..."
          
          cat > deployment-report.md << EOF
          # 📊 Deployment Report
          
          ## Summary
          - **Date**: $(date)
          - **Pipeline Run**: #${{ github.run_number }}
          - **Triggered By**: ${{ github.actor }}
          - **Environment**: ${{ inputs.environment || 'development' }}
          
          ## Change Management
          - **Jira Issue**: ${{ needs.check-jira.outputs.jira_issue_id }}
          - **Change Request**: ${{ needs.standard-charge-creation.outputs.change_request_id }}
          - **FinOps Story**: ${{ needs.check-jira.outputs.finops_story_id }}
          
          ## Infrastructure Deployed
          - **Resource Group**: ${{ needs.release-variables-setup.outputs.resource_group_name }}
          - **Region**: East US
          - **Virtual Machines**: 8 total (1 Bastion, 3 Web, 2 App, 2 DB)
          - **Deployment Status**: ${{ job.status }}
          
          ## Cost Estimation
          - **Monthly Estimate**: \$2,450
          - **Daily Estimate**: \$82
          
          ## Next Steps
          1. Verify application deployment
          2. Configure monitoring alerts
          3. Update DNS records
          4. Schedule penetration testing
          EOF
          
          echo "✅ Report generated: deployment-report.md"

      - name: 📤 Upload Deployment Report
        if: always()
        uses: actions/upload-artifact@v4
        with:
          name: deployment-report-azure-vms
          path: deployment-report.md
    
  build-sql-databases:
    name: 💾 Install SQL Databases  
    runs-on: ubuntu-latest
    needs: [check-jira, release-variables-setup, standard-charge-creation]
    steps:
      - name: 💾 Install SQL DB on Azure VMs
        run: |
          echo "💾 Installing SQL Database on Azure VMs..."
          echo ""
          echo "🪟 Windows SQL Server:"
          echo "  ℹ️ SQL Server 2022 pre-installed with image"
          echo "  ✓ Configuring SQL Server settings..."
          sleep 2
          echo "  ✓ Creating demo database..."
          sleep 1
          echo "  ✓ Setting up backup schedule..."
          sleep 1
          echo "  ✅ Windows SQL Server ready!"
          
          echo ""
          echo "🐧 Linux MySQL Server:"
          echo "  📦 Installing MySQL Server..."
          sleep 2
          echo "  ✓ MySQL 8.0 installed"
          echo "  ✓ Configuring MySQL settings..."
          sleep 1
          echo "  ✓ Creating demo database..."
          sleep 1
          echo "  ✓ Setting up replication..."
          sleep 1
          echo "  ✅ Linux MySQL Server ready!"
          
          echo ""
          echo "✅ All database servers configured successfully!"

      - name: 📊 Generate Database Report
        if: always()
        run: |
          echo "📊 Generating database installation report..."
          
          cat > database-report.md << EOF
          # 💾 Database Installation Report
          
          ## Summary
          - **Date**: $(date)
          - **Pipeline Run**: #${{ github.run_number }}
          - **Environment**: ${{ inputs.environment || 'development' }}
          
          ## Database Servers Configured
          - **Windows SQL Server 2022**: Ready
          - **Linux MySQL 8.0**: Ready
          - **Backup Configuration**: Enabled
          - **Replication Setup**: Active
          
          ## Configuration Details
          - **SQL Server Port**: 1433
          - **MySQL Port**: 3306
          - **High Availability**: Configured
          - **Security**: SSL Enabled
          
          ## Next Steps
          1. Configure application connections
          2. Set up monitoring dashboards
          3. Schedule maintenance windows
          4. Verify backup procedures
          EOF
          
          echo "✅ Database report generated"

      - name: 📤 Upload Database Report
        if: always()
        uses: actions/upload-artifact@v4
        with:
          name: deployment-report-sql-databases
          path: database-report.md

  post-deployment:
    name: 📮 Post Deployment Tasks
    runs-on: ubuntu-latest
    needs: [build-azure-vms, build-sql-databases, check-jira, release-variables-setup, standard-charge-creation]
    if: always()
    steps:
      - name: 🎫 Update Jira
        run: |
          echo "🎫 Updating Jira ticket..."
          echo "  📝 Issue: ${{ needs.check-jira.outputs.jira_issue_id }}"
          
          # Check if both build jobs succeeded
          VM_STATUS="${{ needs.build-azure-vms.result }}"
          DB_STATUS="${{ needs.build-sql-databases.result }}"
          
          if [[ "$VM_STATUS" == "success" && "$DB_STATUS" == "success" ]]; then
            STATUS="success"
          else
            STATUS="failure"
          fi
          
          if [[ "$STATUS" == "success" ]]; then
            echo "  ✅ Adding success comment to Jira"
            echo "  📎 Attaching deployment report"
            echo "  🏷️ Updating status: In Progress → Done"
          else
            echo "  ❌ Adding failure comment to Jira"
            echo "  📎 Attaching error logs"
            echo "  🏷️ Status remains: In Progress"
          fi
          
          sleep 2
          echo "✅ Jira updated successfully"

      - name: 📢 Send Notifications
        run: |
          echo "📢 Sending deployment notifications..."
          
          # Check if both build jobs succeeded
          VM_STATUS="${{ needs.build-azure-vms.result }}"
          DB_STATUS="${{ needs.build-sql-databases.result }}"
          
          if [[ "$VM_STATUS" == "success" && "$DB_STATUS" == "success" ]]; then
            STATUS="success"
          else
            STATUS="failure"
          fi
          STATUS_EMOJI=$([ "$STATUS" == "success" ] && echo "✅" || echo "❌")
          
          echo ""
          echo "📧 Email Notification:"
          echo "  To: platform-team@company.com"
          echo "  Subject: ${STATUS_EMOJI} Deployment $STATUS - ${{ needs.check-jira.outputs.jira_issue_id }}"
          
          echo ""
          echo "💬 Slack Notification:"
          echo "  Channel: #infrastructure-alerts"
          echo "  Message: ${STATUS_EMOJI} Azure deployment $STATUS"
          
          echo ""
          echo "📊 Microsoft Teams:"
          echo "  Channel: Platform Engineering"
          echo "  Card: Deployment Summary with interactive buttons"
          
          if [[ "${{ inputs.simulate_failure }}" == "post_deploy" ]]; then
            echo ""
            echo "❌ Failed to send notifications!"
            exit 1
          fi
          
          sleep 2
          echo ""
          echo "✅ All notifications sent successfully"

      - name: 📝 Close Change Request
        run: |
          echo "📝 Closing Change Request..."
          echo "  📋 CR: ${{ needs.standard-charge-creation.outputs.change_request_id }}"
          
          # Check if both build jobs succeeded
          VM_STATUS="${{ needs.build-azure-vms.result }}"
          DB_STATUS="${{ needs.build-sql-databases.result }}"
          
          if [[ "$VM_STATUS" == "success" && "$DB_STATUS" == "success" ]]; then
            STATUS="success"
          else
            STATUS="failure"
          fi
          
          if [[ "$STATUS" == "success" ]]; then
            echo "  ✅ Closing as: Successful"
            echo "  📄 Close notes: Deployment completed without issues"
          else
            echo "  ❌ Closing as: Failed"
            echo "  📄 Close notes: Deployment failed - see GitHub Actions logs"
          fi
          
          sleep 2
          echo "✅ Change Request closed"

      - name: 📊 Final Summary
        if: always()
        run: |
          echo ""
          echo "========================================="
          echo "📊 PIPELINE EXECUTION SUMMARY"
          echo "========================================="
          echo ""
          echo "Pipeline: ${{ needs.build.result == 'success' && '✅ SUCCESS' || '❌ FAILED' }}"
          echo ""
          echo "Stages Completed:"
          echo "  ${{ needs.check-jira.result == 'success' && '✅' || '❌' }} Jira Validation"
          echo "  ${{ needs.release-variables-setup.result == 'success' && '✅' || '❌' }} Variable Setup"
          echo "  ${{ needs.standard-charge-creation.result == 'success' && '✅' || '❌' }} Change Management"
          echo "  ${{ needs.build.result == 'success' && '✅' || '❌' }} Infrastructure Build"
          echo "  ${{ job.status == 'success' && '✅' || '❌' }} Post Deployment"
          echo ""
          echo "Total Duration: ~5 minutes (demo)"
          echo "========================================="