Merge pull request #30 from trustgraph-ai/dev-customization #32


	name: Deploy to dev

	on:
	workflow_dispatch:
	push:

	# Deploys on version tag beginning v. Note there's a branch filter
	# below, locks to the dev branch
	tags:
	- v*

	permissions:
	contents: read
	id-token: 'write'
	packages: read

	jobs:

	deploy:

	# This doesn't work on tag pushes, so at the moment, all tags deploy
	# to dev

	# Only fires on the dev branch
	# if: github.ref == 'refs/heads/dev'

	name: Deploy to dev
	runs-on: ubuntu-latest

	steps:

	- name: Checkout
	uses: actions/checkout@v3

	- name: Get version
	id: version
	run: echo VERSION=$(git describe --exact-match --tags \| sed 's/^v//') >> $GITHUB_OUTPUT

	- name: Install deps
	run: npm install

	- name: Build container
	run: make VERSION=${{ steps.version.outputs.VERSION }}

	- id: auth
	name: Authenticate with Google Cloud
	uses: google-github-actions/auth@v2
	with:
	token_format: access_token
	workload_identity_provider: projects/583813057664/locations/global/workloadIdentityPools/deploy/providers/github
	service_account: deploy@trustgraph-demo.iam.gserviceaccount.com
	access_token_lifetime: 900s
	create_credentials_file: true

	- name: Login to Artifact Registry
	uses: redhat-actions/podman-login@v1
	with:
	registry: us-central1-docker.pkg.dev
	username: oauth2accesstoken
	password: ${{ steps.auth.outputs.access_token }}

	- name: Install Pulumi
	run: cd pulumi && npm install

	- name: Applying infrastructure 🚀🙏
	uses: pulumi/actions@v3
	with:
	command: up
	stack-name: dev
	work-dir: pulumi
	cloud-url: gs://trustgraph-deploy/config-ui
	env:
	PULUMI_CONFIG_PASSPHRASE: ""
	IMAGE_VERSION: ${{ steps.version.outputs.VERSION }}

Provide feedback