Hi! I’m trying to use Github Actions to deploy stack changes automatically, but the action is failing without any message:

### STARTED Pulumi Deploy (Current Stack) 204029Z

(pulling, digest, status, etc…)

### FAILED Pulumi Deploy (Current Stack) 204030Z (97ms)

I can run

pulumi update/preview

locally and i’ve setup my

.pulumi/ci.json

and the workflow secrets correctly, so i’m not sure how to debug this. ☹️

in the etc... part, is there any error message at all?

Nope, everything looks fine

er...

Looking, am going to try to repro locally, just a few mins.

I’ve tried to add

--debug

flag in

args

, but the i don’t receive any debug/error message too. 🤔

Alright, I was able to repro, and I think I've figured it out. I believe GitHub must have deprecated some old syntax.

Hm, that makes sense now. 🙂

There are two issues: 1) GitHub deprecated the

@tag

syntax for Docker images, apparently replaced by

:tag

(makes sense, as it's consistent with Docker tag syntax generally) 2) Our docs are still using the old

pulumi/actions

Docker image. That still technically works, but we've begun publishing newer images underneath

pulumi/pulumi

. So, in a nutshell, everywhere the workflow file says

uses = "<docker://pulumi/actions@v0.16.0>"

it should instead say `uses = "docker://pulumi/pulumi" Or, alternatively a specific version if you want to pin, e.g.

uses = "<docker://pulumi/pulumi:v0.16.2>"

I am working to verify this works and, assuming it does, will update our docs. Sorry for the hassles -- we didn't catch this because we generally don't pin to specific versions and let it float to

latest

automatically.

Great, i’m going to update our repository to use it! One question: the source code from

pulumi/pulumi

lives in the same repository of

pulumi/actions

? I was working on a PR to add AWS IAM Authenticator to the Docker image, so we can use AWS EKS.

Actually, my mistake, there are still differences in the

pulumi/pulumi

and

pulumi/actions

images (namely, the presence of GitHub actions tags and cloud-specific SDKs). I love the idea of a PR for AWS IAM Authenticator, so pulumi/actions is the right place to add that. I'm rebuilding and publishing a newer image now based on our latest v0.16.6 SDK, and will have a PR out for the docs repo momentarily to get rid of the legacy syntax.

Yes, seems like have different Docker images for

pulumi/pulumi

and

pulumi/actions

is a better ideia. In the future,

pulumi/actions

can have additional features, like posting a comment in case of conflicts, preview errors, common mistakes, etc. I’ve just updated our actions to use the new

:

syntax instead

@

and now it’s working properly, thank you! 😅 I’m working on the PR right now 🙂

Great!

Great, thank you! I’ve just created the PR, it was pretty simple 😂: https://github.com/pulumi/actions/pull/1