pulumi-update.yaml

name: Pulumi Update
on:
  workflow_dispatch:
    inputs:
      environment:
        description: 'Environment'
        required: true
        type: choice
        default: 'dev'
        options:
          - 'dev'
          - 'prod'
jobs:
  preview:
    name: Update ${{ github.event.inputs.environment || 'dev' }}
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: pnpm/action-setup@v2

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version-file: .nvmrc
          cache: pnpm
          cache-dependency-path: pnpm-lock.yaml

      - name: Install deps
        run: pnpm install --frozen-lockfile --prefer-offline

      - uses: pulumi/actions@v5
        with:
          command: up
          stack-name: pedaki/infrastructure/${{ github.event.inputs.environment || 'dev' }}
          comment-on-pr: true
          comment-on-summary: true
          refresh: true
        env:
          PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }}
          RESEND_API_KEY: ${{ secrets.RESEND_API_KEY }}
          APP_DOCKER_USERNAME: ${{ secrets.APP_DOCKER_USERNAME }}
          APP_DOCKER_PASSWORD: ${{ secrets.APP_DOCKER_PASSWORD }}
          CLOUDFLARE_CA: ${{ secrets.CLOUDFLARE_CA }}
          CLOUDFLARE_CA_KEY: ${{ secrets.CLOUDFLARE_CA_KEY }}
          CLOUDFLARE_ORIGIN_CA: ${{ secrets.CLOUDFLARE_ORIGIN_CA }}
          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
          CLOUDFLARE_ZONE_ID: ${{ secrets.CLOUDFLARE_ZONE_ID }}
          BASELIME_API_KEY: ${{ secrets.BASELIME_API_KEY }}