Skip to content

Pulumi

Pulumi #8

Workflow file for this run

name: Pulumi
on:
workflow_dispatch:
inputs:
environment:
type: choice
description: GitHub Environment
options:
- dev
default: dev
pulumi_task:
type: choice
description: Pulumi task to execute
options:
- deploy
- destroy
default: deploy
az_number:
type: string
description: Number of Availability Zones
default: "2"
container_image_uri:
type: string
description: Image URI
default: "nginx"
container_cpu:
type: string
description: Container CPU
default: "256"
container_memory:
type: string
description: Container Memory
default: "512"
container_port:
type: string
description: Container Port
default: "80"
host_port:
type: string
description: Host Port
default: "80"
env:
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
AWS_REGION: ${{ vars.AWS_REGION }}
AWS_SESSION_TOKEN: ${{ secrets.AWS_SESSION_TOKEN }}
PULUMI_CONFIG_PASSPHRASE: ${{ secrets.PULUMI_CONFIG_PASSPHRASE }}
GITHUB_ENVIRONMENT: ${{ inputs.environment }}
AWS_RESOURCE_PREFIX: "pulumi-${{ inputs.environment }}"
AWS_RESOURCE_SHORT_PREFIX: "p-${{ inputs.environment }}" # Max 6 chars
AWS_AZ_NUMBER: ${{ inputs.az_number }}
CONTAINER_IMAGE_URI: ${{ inputs.container_image_uri }}
CONTAINER_CPU: ${{ inputs.container_cpu }}
CONTAINER_MEMORY: ${{ inputs.container_memory }}
CONTAINER_PORT: ${{ inputs.container_port }}
HOST_PORT: ${{ inputs.host_port }}
jobs:
preview:
name: Pulumi Preview
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v5
with:
python-version: 3.12
- name: Configure AWS Credentials
uses: aws-actions/configure-aws-credentials@v1
with:
aws-access-key-id: ${{ env.AWS_ACCESS_KEY_ID }}
aws-region: ${{ env.AWS_REGION }}
aws-secret-access-key: ${{ env.AWS_SECRET_ACCESS_KEY }}
aws-session-token: ${{ env.AWS_SESSION_TOKEN }}
- name: Install pulumi and login to S3
run: |
pip install pulumi
pulumi login s3://pulumi-lab-state2
- name: Setup pulumi stack and variables
run: |
pulumi stack select --create $GITHUB_ENVIRONMENT
pulumi config set aws:region $AWS_REGION
pulumi config set region $AWS_REGION
pulumi config set az_number $AWS_AZ_NUMBER
pulumi config set prefix $AWS_RESOURCE_PREFIX
pulumi config set short_prefix $AWS_RESOURCE_SHORT_PREFIX
pulumi config set image_uri $CONTAINER_IMAGE_URI
pulumi config set cpu $CONTAINER_CPU
pulumi config set memory $CONTAINER_MEMORY
pulumi config set container_port $CONTAINER_PORT
pulumi config set host_port $HOST_PORT
working-directory: pulumi
- name: Pulumi Deploy Preview
if: env.PULUMI_TASK == 'deploy'
run: |
pulumi preview
working-directory: pulumi
- name: Pulumi Deploy Preview (Detailed)
if: env.PULUMI_TASK == 'deploy'
run: |
pulumi preview --json
working-directory: pulumi
- name: Pulumi Destroy Preview
if: env.PULUMI_TASK == 'destroy'
run: |
pulumi destroy --diff
working-directory: pulumi
deploy:
name: Pulumi Deploy
runs-on: ubuntu-latest
needs: preview
if: inputs.pulumi_task == 'deploy'
environment: ${{ inputs.environment }}
steps:
- uses: actions/checkout@v2
- uses: actions/setup-python@v2
with:
python-version: 3.12
- name: Configure AWS Credentials
uses: aws-actions/configure-aws-credentials@v1
with:
aws-access-key-id: ${{ env.AWS_ACCESS_KEY_ID }}
aws-region: ${{ env.AWS_REGION }}
aws-secret-access-key: ${{ env.AWS_SECRET_ACCESS_KEY }}
aws-session-token: ${{ env.AWS_SESSION_TOKEN }}
- name: Install pulumi and login to S3
run: |
pip install pulumi
pulumi login s3://pulumi-lab-state2
- name: Setup pulumi stack and variables
run: |
pulumi stack select --create $GITHUB_ENVIRONMENT
pulumi config set aws:region $AWS_REGION
pulumi config set region $AWS_REGION
pulumi config set az_number $AWS_AZ_NUMBER
pulumi config set prefix $AWS_RESOURCE_PREFIX
pulumi config set short_prefix $AWS_RESOURCE_SHORT_PREFIX
pulumi config set image_uri $CONTAINER_IMAGE_URI
pulumi config set cpu $CONTAINER_CPU
pulumi config set memory $CONTAINER_MEMORY
pulumi config set container_port $CONTAINER_PORT
pulumi config set host_port $HOST_PORT
working-directory: pulumi
- name: Pulumi Deploy Infrastructure
run: |
pulumi up --yes
working-directory: pulumi
destroy:
name: Pulumi Destroy
runs-on: ubuntu-latest
needs: preview
if: inputs.pulumi_task == 'destroy'
environment: ${{ inputs.environment }}
steps:
- uses: actions/checkout@v2
- uses: actions/setup-python@v2
with:
python-version: 3.12
- name: Configure AWS Credentials
uses: aws-actions/configure-aws-credentials@v1
with:
aws-access-key-id: ${{ env.AWS_ACCESS_KEY_ID }}
aws-region: ${{ env.AWS_REGION }}
aws-secret-access-key: ${{ env.AWS_SECRET_ACCESS_KEY }}
aws-session-token: ${{ env.AWS_SESSION_TOKEN }}
- name: Install pulumi and login to S3
run: |
pip install pulumi
pulumi login s3://pulumi-lab-state2
- name: Setup pulumi stack and variables
run: |
pulumi stack select --create $GITHUB_ENVIRONMENT
pulumi config set aws:region $AWS_REGION
pulumi config set region $AWS_REGION
pulumi config set az_number $AWS_AZ_NUMBER
pulumi config set prefix $AWS_RESOURCE_PREFIX
pulumi config set short_prefix $AWS_RESOURCE_SHORT_PREFIX
pulumi config set image_uri $CONTAINER_IMAGE_URI
pulumi config set cpu $CONTAINER_CPU
pulumi config set memory $CONTAINER_MEMORY
pulumi config set container_port $CONTAINER_PORT
pulumi config set host_port $HOST_PORT
working-directory: pulumi
- name: Pulumi Deploy Infrastructure
run: |
pulumi destroy --yes
working-directory: pulumi