Hosting stays in the ba-staging Azure subscription
Date: 2026-10-30 · Status: Accepted
Context
Section titled “Context”BA had no working hosted environment for over a year. The ba-staging subscription held nine dead resources from the 2024 Terraform: two container apps on images that could no longer be pulled, two vaults, an old Terraform state account. A new subscription would need billing-admin work and separate nothing of value.
Decision
Section titled “Decision”Keep the ba-staging subscription and its name, matching TEP’s tep-staging. Delete every existing resource. The new ba-infrastructure repository bootstraps its own state storage and Terraform vault in rg-terraform.
Consequences
Section titled “Consequences”The old resource group ba-staging-proud-maggot, the old state account baterraformconfig and the auto-created LogAnalyticsDefaultResources were deleted on 2026-11-05 at the end of the bring-up, together with the old documents bucket businessaffairs-staging in the Sii management account and the demo API. The external-service secrets from the old vault were copied to 1Password first, because Ory and mail outlive the Azure teardown.