Hi everyone, we're just getting started with Pulumi and for the most part it's been so far so good. There are a couple of things relating to the GitHub app and CI/CD which are confusing us though. We have configured the GitHub app and set Pulumi to run a preview every time a PR is opened to merge changes from one branch to another, that all works great and we get the output of the preview added to the PR. When we then merge the PR we don't have any way to see if the update then succeeds or fails. Is that normal or are we doing something wrong?

Where are you running

pulumi up

from? Presumably it's not from the PR, since that's tracking a temporary branch. If you're running

pulumi up

from a GitHub workflow, it'll probably be in a branch, most likely main. Check the actions run on the main branch, the information should all be there.

The up seems to be running magically when the PR is merged, presumably by means of the Pulumi GitHub app. If we want more control we may have to use GitHub actions rather than using the Pulumi GitHub app.

You'll need to share your action's parameters. It's been a long time since i used the Pulumi GitHub action and I don't remember running

up

as part of it. You should also check the

on: push:

workflow, which is what covers the "merge to" logic. The

on: pull_request:

workflow is what looks after the PR part, but (as I understand it) it doesn't go all the way to merging to the destination branch.

That's the thing we're not explicitly used or configured the GitHub action anywhere and we have no workflows within the Pulumi repo. I think the Pulumi GitHub app is doing the work behind the scenes - https://www.pulumi.com/docs/iac/using-pulumi/continuous-delivery/github-app/

I've not used it. Where are you checking for the output of the merge? In GitHub? In the Pulumi webapp? There's no screenshot of merge results being displayed on the page you linked, this is the only relevant text I could find:

All Pulumi stack updates are reported to the GitHub Checks API. You can see the results of each commit check by “Code” tab’s “Commits” page, and then clicking the ✅ or ❌ icon.

That's pretty much what I'm seeing, only checks and not the result of the final merge. I'm merging from

dev

->

uat

->

main

(production) and eventually I see the attached screenshot on the PR into

main

but it references the

uat

branch which doesn't seem right. I'm sure I've just misconfigured something so I'll keep plugging away.

Can you see it in the Pulumi app? app.pulumi.com?

Yeah it's there and the deployment has worked and fed back through our slack webhook. What I'm looking for doesn't like it's possible but I guess we can live with the webhook notificaitons

Feature request? I don't actually know which repo hosts the issues for Pulumi Deployments. The app is the UI for Deployments, I think?

thanks for the help, i'll have a look and see