pulumi.yaml

name: Deploy IaC with Pulumi
on:
  push:
    branches:
      - master
  workflow_dispatch:

jobs:
  pulumi:
    permissions:
      id-token: write
      contents: read
    name: Preview
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: google-github-actions/auth@v2
        with:
          project_id: ${{ env.GCP_PROJECT_ID }}
          workload_identity_provider: projects/491900032446/locations/global/workloadIdentityPools/github-actions-pool/providers/github
          service_account: github-actions@hello-pulumi-435400.iam.gserviceaccount.com
      - uses: actions/download-artifact@v4
        with:
          path: /home/runner/work/hello-pulumi/hello-pulumi/

      - name: Set up Python
        uses: actions/setup-python@v4
        with:
          python-version: '3.10'

      - name: Install dependencies
        run: pip3 install -r requirements.txt

      - name: Preview infra
        uses: pulumi/actions@v5
        with:
          command: preview
          stack-name: pablordoricaw/dev
        env:
          PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }}

      - name: Update infra
        uses: pulumi/actions@v5
        with:
          command: update
          stack-name: pablordoricaw/dev
        env:
          PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }}