pulumi.yaml

name: Deploy IaC with Pulumi
on:
  push:
    branches:
      - master
  workflow_dispatch:

jobs:
  pulumi:
    permissions:
      id-token: write
      contents: read
    name: Preview
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: google-github-actions/auth@v2
        with:
          project_id: ${{ env.GCP_PROJECT_ID }}
          workload_identity_provider: projects/491900032446/locations/global/workloadIdentityPools/github-pool/providers/my-repo

      - name: Look for GCP Creds
        run: ls -la

      - name: Cat GCP Creds
        run: cat gha-creds-*

      - name: Set up Python
        uses: actions/setup-python@v4
        with:
          python-version: '3.10'

      - name: Install dependencies
        run: pip3 install -r requirements.txt

      - name: Preview infra
        uses: pulumi/actions@v5
        with:
          command: preview
          stack-name: pablordoricaw/dev
        env:
          PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }}

      - name: Update infra
        uses: pulumi/actions@v5
        with:
          command: update
          stack-name: pablordoricaw/dev
        env:
          PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }}