ci: flip back to AFD endpoint for CT

Author: dmcilvaney

.github/workflows/ado/package-build.yml

@@ -37,7 +37,7 @@
 #   Name: "ControlTower-PRCheck"
 #   Required variables:
 #     - ApiAudience          : Entra ID audience URI for the Control Tower app
-#     - ApiBaseDirectUrl     : Direct base URL of the Control Tower APIM endpoint (bypasses Azure Front Door)
+#     - ApiBaseAFDUrl        : Base URL of the Control Tower service (Azure Front Door endpoint)
 
 # Trigger controlled by ADO branch policy — not YAML triggers.
 trigger: none

.github/workflows/ado/pr-package-build.yml

@@ -49,7 +49,7 @@
 #   Name: "ControlTower-PRCheck"
 #   Required variables:
 #     - ApiAudience          : Entra ID audience URI for the Control Tower app
-#     - ApiBaseDirectUrl     : Direct base URL of the Control Tower APIM endpoint (bypasses Azure Front Door)
+#     - ApiBaseAFDUrl        : Base URL of the Control Tower service (Azure Front Door endpoint)
 
 # Trigger controlled by ADO branch policy — not YAML triggers.
 trigger: none

.github/workflows/ado/sources-upload.yml

@@ -34,7 +34,7 @@
 #   Name: "ControlTower-PRCheck"
 #   Required variables:
 #     - ApiAudience          : Entra ID audience URI for the Control Tower app
-#     - ApiBaseDirectUrl     : Direct base URL of the Control Tower APIM endpoint (bypasses Azure Front Door)
+#     - ApiBaseAFDUrl        : Base URL of the Control Tower service (Azure Front Door endpoint)
 
 # Trigger controlled by ADO branch policy — not YAML triggers.
 trigger: none

.github/workflows/ado/templates/package-build-stages.yml

@@ -81,7 +81,7 @@ stages:
                   --repo-uri "$UPSTREAM_REPO_URL"
             env:
               API_AUDIENCE: $(ApiAudience)
-              API_BASE_URL: $(ApiBaseDirectUrl)
+              API_BASE_URL: $(ApiBaseAFDUrl)
               # Non-reserved name: an `env:` override of the reserved BUILD_REASON var is silently ignored by the agent.
               CT_BUILD_REASON: $(Build.Reason)
               CHANGED_COMPONENTS_FILE: $(changedComponentsFile)

.github/workflows/ado/templates/pr-package-build-stages.yml

@@ -237,7 +237,7 @@ stages:
                   --poll-timeout-seconds ${{ parameters.pollTimeoutSeconds }}
             env:
               API_AUDIENCE: $(ApiAudience)
-              API_BASE_URL: $(ApiBaseDirectUrl)
+              API_BASE_URL: $(ApiBaseAFDUrl)
               # Non-reserved name: an `env:` override of the reserved BUILD_REASON var is silently ignored by the agent.
               CT_BUILD_REASON: $(Build.Reason)
               CHANGED_COMPONENTS_FILE: $(changedComponentsFile)

.github/workflows/ado/templates/sources-upload-stages.yml

@@ -82,7 +82,7 @@ stages:
                   --repo-uri "$UPSTREAM_REPO_URL"
             env:
               API_AUDIENCE: $(ApiAudience)
-              API_BASE_URL: $(ApiBaseDirectUrl)
+              API_BASE_URL: $(ApiBaseAFDUrl)
               # Non-reserved name: an `env:` override of the reserved BUILD_REASON var is silently ignored by the agent.
               CT_BUILD_REASON: $(Build.Reason)
               CHANGED_COMPONENTS_FILE: $(changedComponentsFile)