ci: Deploy main on approval

.github/workflows/infra-deploy.yml

@@ -0,0 +1,34 @@
+name: Deploy Infrastructure
+
+on:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: read
+  id-token: write
+
+jobs:
+  deploy:
+    environment:
+      name: Production
+      url: https://kitten-science.com
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Checkout
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@010d0da01d0b5a38af31e9c3470dbfdabdecca3a # v4
+        with:
+          role-to-assume: arn:aws:iam::022327457572:role/ks-infrastructure-maintainer
+          aws-region: eu-west-1
+
+      - name: Terraform Init
+        run: terraform init
+        working-directory: terraform
+
+      - name: Terraform Apply
+        run: terraform apply -auto-approve
+        working-directory: terraform

.github/workflows/deploy-infra.yml → .github/workflows/infra-test.yml

@@ -1,9 +1,10 @@
-name: Deploy Infrastructure
+name: QA
 
 on:
   push:
     branches:
       - main
+      - renovate/*
 
 permissions:
   contents: read