pull-request.yml

name: PR

on:
  pull_request:

permissions:
  contents: read
  id-token: write

jobs:
  preview-changes:
    name: Preview changes (${{ matrix.project }} @ ${{ matrix.stack-name }})
    runs-on: ubuntu-latest

    strategy:
      fail-fast: false
      matrix:
        include:
          - project: core-infra
            stack-name: bjerk/prod
          - project: bjerk-io
            stack-name: bjerk/prod
    steps:
      - name: Checkout 🛎️
        uses: actions/checkout@v4

      - uses: pnpm/action-setup@v2

      - name: Use Node LTS ✨
        uses: actions/setup-node@v3
        with:
          node-version: lts/*
          cache: pnpm

      - uses: 'google-github-actions/setup-gcloud@v2'
        with:
          install_components: 'gke-gcloud-auth-plugin'

      - name: Authenticate with Google 🔑
        uses: google-github-actions/auth@v1
        with:
          workload_identity_provider: ${{ secrets.WORKLOAD_IDENTITY_PROVIDER }}
          service_account: ${{ secrets.GOOGLE_SERVICE_ACCOUNT }}

      - name: Install dependencies 📦️
        run: pnpm install --frozen-lockfile

      - name: Run Pulumi 🚀
        uses: pulumi/actions@v4
        env:
          PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }}
        with:
          command: preview
          refresh: false
          stack-name: ${{ matrix.stack-name }}
          work-dir: projects/${{ matrix.project }}
          comment-on-pr: true
          github-token: ${{ secrets.BJERKBOT_GITHUB_TOKEN }}