Pulumi Config

infrastructure.yml

name: Infrastructure
on:
  workflow_dispatch:
  push:
    branches:
      - main
    paths:
      - "infrastructure/**"

jobs:
  deploy:
    name: Deploy
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v2
      - uses: actions/setup-node@v2
        with:
          node-version: 14.x
      - run: yarn install
      - uses: pulumi/actions@v3
        with:
          command: up
          stack-name: myproject-dev
          work-dir: infrastructure
          comment-on-pr: true
        env:
          PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }}

Project structure

.github/
  workflows/
    infrastructure.yml
apps/
  web/
    ...
infrastructure/
  Pulumi.myproject-dev.yaml
  Pulumi.yaml
  ...
package.json
yarn.lock

Pulumi.myproject-dev.yaml

encryptionsalt: ENCRYPTION_SALT
config:
  digitalocean:token:
    secure: DIGITAL_OCEAN_TOKEN

Pulumi.yaml

name: myproject
runtime: nodejs
description: MyProject infrastructure