pulumi_preview.yaml

name: Pulumi Preview
on:
  workflow_dispatch:
  pull_request:
    branches: main

permissions:
  contents: read
  id-token: write
  pull-requests: write

jobs:
  pulumi-preview:
    name: Preview infrastructure changes
    runs-on: ubuntu-latest
    steps:
      - name: Checkout 🛎️
        uses: actions/checkout@v4

      - name: Set up Python 🐍
        uses: actions/setup-python@v5
        with:
          cache: pip

      - name: Install dependencies 📦️
        run: |
          pip install -r requirements/requirements.txt -e .
          pip install -r requirements/dev-requirements.txt

      - name: Configure AWS credentials 🔐
        uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: arn:aws:iam::767397675902:role/hubverse-infrastructure-read-role
          aws-region: us-east-1

      - name: Previewing infrastructure 👀
        uses: pulumi/actions@v5
        with:
          command: preview
          stack-name: hubverse/hubverse-aws/hubverse
          comment-on-pr: true
        env:
          PULUMI_ACCESS_TOKEN: ${{ secrets.BSWEGER_PULUMI_DEMO }}