name: Pulumi
description: Run Pulumi commands
inputs:
  azureClientId:
    required: true
  azureTenantId:
    required: true
  azureSubscriptionId:
    required: true
  pulumiStackName:
    required: true
  pulumiCommand:
    required: false
    default: preview
  pulumiWorkDir:
    required: false
    default: pulumi
  pulumiAccessToken:
    required: true

runs:
  using: "composite"
  steps:

    - uses: actions/setup-dotnet@v1
      with:
        dotnet-version: 6.0.x

    - name: az login
      uses: azure/login@v1
      with:
        client-id: ${{ inputs.azureClientId }}
        tenant-id: ${{ inputs.azureTenantId }}
        subscription-id: ${{ inputs.azureSubscriptionId }}

    - uses: pulumi/actions@v3
      with:
        command: ${{ inputs.pulumiCommand }}
        stack-name: ${{ inputs.pulumiStackName }}
        work-dir: ${{ inputs.pulumiWorkDir }}
      env:
        PULUMI_ACCESS_TOKEN: ${{ inputs.pulumiAccessToken }}

name: Pulumi Preview

permissions:
  id-token: write
  contents: read

on:
  - pull_request
jobs:
  preview:
    name: Preview
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v2

      - uses: ./.github/actions/pulumi
        with:
          azureClientId: <client-id>
          azureTenantId: <tenant-id>
          azureSubscriptionId: <subscription-id>
          pulumiStackName: myorg/mystack
          pulumiCommand: preview
          pulumiWorkDir: ${{ github.workspace }}/pulumi
          pulumiAccessToken: ${{ secrets.PULUMI_ACCESS_TOKEN }}