softwaredevelop · softwaredevelop · Sep 10, 2025 · Sep 10, 2025
diff --git a/iac/deploy.go b/iac/deploy.go
@@ -0,0 +1,102 @@
+//revive:disable:package-comments,exported
+package main
+
+import (
+	"context"
+	"fmt"
+	"log"
+	"os"
+
+	"github.com/pulumi/pulumi/sdk/v3/go/auto"
+)
+
+func main() {
+	ctx := context.Background()
+
+	// Configuration
+	stackProjectName := "github-repos"
+	stackEnvironmentName := "prod-strategy-optimizer"
+	workDir := "pulumi-github-main"
+	pulumiOrganizationName := os.Getenv("PULUMI_ORG_NAME")
+	pulumiAccessToken := os.Getenv("PULUMI_ACCESS_TOKEN")
+
+	// Validate required environment variables
+	if pulumiOrganizationName == "" || pulumiAccessToken == "" {
+		log.Fatal("PULUMI_ORG_NAME and PULUMI_ACCESS_TOKEN must be set")
+	}
+
+	configMap := auto.ConfigMap{
+		"github:token": auto.ConfigValue{
+			Value:  os.Getenv("GITHUB_TOKEN"),
+			Secret: true,
+		},
+		"github:owner": auto.ConfigValue{
+			Value:  os.Getenv("GITHUB_OWNER"),
+			Secret: true,
+		},
+	}
+
+	// Create or select the stack
+	pulumiStackName := auto.FullyQualifiedStackName(pulumiOrganizationName, stackProjectName, stackEnvironmentName)
+	stack, err := NewPulumiStack(ctx, pulumiStackName, workDir)
+	if err != nil {
+		log.Fatalf("Failed to create or select stack: %v", err)
+	}
+	log.Println("Stack", pulumiStackName, "ready")
+
+	// Deploy the stack
+	outputs, err := deployStack(ctx, stack, pulumiAccessToken, configMap)
+	if err != nil {
+		log.Fatalf("Stack deployment failed: %v", err)
+	}
+
+	log.Println("Stack deployment completed successfully")
+	if len(outputs) > 0 {
+		log.Println("Stack outputs:")
+		for k, v := range outputs {
+			// Note: Secret outputs will be encrypted in the log.
+			log.Printf("- %s: %s\n", k, v.Value)
+		}
+	}
+}
+
+// deployStack orchestrates the deployment of a Pulumi stack.
+// It is designed to be testable by accepting a Stack interface.
+func deployStack(ctx context.Context, stack Stack, pulumiAccessToken string, configMap auto.ConfigMap) (map[string]auto.OutputValue, error) {
+	err := stack.SetEnvVars(map[string]string{
+		"PULUMI_SKIP_UPDATE_CHECK": "true",
+		"PULUMI_CONFIG_PASSPHRASE": "",
+		"PULUMI_ACCESS_TOKEN":      pulumiAccessToken,
+	})
+	if err != nil {
+		return nil, fmt.Errorf("failed to set environment variables: %w", err)
+	}
+
+	err = stack.SetAllConfig(ctx, configMap)
+	if err != nil {
+		return nil, fmt.Errorf("failed to set config: %w", err)
+	}
+
+	log.Println("Refreshing stack...")
+	refrOut, err := stack.Refresh(ctx)
+	if err != nil {
+		return nil, fmt.Errorf("failed to refresh stack: %w", err)
+	}
+	log.Println(refrOut)
+
+	log.Println("Previewing stack...")
+	prevOut, err := stack.Preview(ctx)
+	if err != nil {
+		return nil, fmt.Errorf("failed to preview stack: %w", err)
+	}
+	log.Println(prevOut)
+
+	log.Println("Updating stack...")
+	upResult, err := stack.Up(ctx)
+	if err != nil {
+		return nil, fmt.Errorf("failed to update stack: %w", err)
+	}
+	log.Println(upResult.StdOut)
+
+	return upResult.Outputs, nil
+}
diff --git a/iac/go.mod b/iac/go.mod
@@ -0,0 +1,98 @@
+module pulumi-infra
+
+go 1.24.2
+
+require (
+	github.com/pulumi/pulumi/sdk/v3 v3.177.0
+	github.com/stretchr/testify v1.10.0
+)
+
+require (
+	dario.cat/mergo v1.0.0 // indirect
+	github.com/BurntSushi/toml v1.2.1 // indirect
+	github.com/Microsoft/go-winio v0.6.1 // indirect
+	github.com/ProtonMail/go-crypto v1.1.3 // indirect
+	github.com/aead/chacha20 v0.0.0-20180709150244-8b13a72661da // indirect
+	github.com/agext/levenshtein v1.2.3 // indirect
+	github.com/apparentlymart/go-textseg/v13 v13.0.0 // indirect
+	github.com/apparentlymart/go-textseg/v15 v15.0.0 // indirect
+	github.com/atotto/clipboard v0.1.4 // indirect
+	github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
+	github.com/blang/semver v3.5.1+incompatible // indirect
+	github.com/charmbracelet/bubbles v0.16.1 // indirect
+	github.com/charmbracelet/bubbletea v0.25.0 // indirect
+	github.com/charmbracelet/lipgloss v0.7.1 // indirect
+	github.com/cheggaaa/pb v1.0.29 // indirect
+	github.com/cloudflare/circl v1.6.1 // indirect
+	github.com/containerd/console v1.0.4-0.20230313162750-1ae8d489ac81 // indirect
+	github.com/cyphar/filepath-securejoin v0.3.6 // indirect
+	github.com/davecgh/go-spew v1.1.1 // indirect
+	github.com/djherbis/times v1.5.0 // indirect
+	github.com/emirpasic/gods v1.18.1 // indirect
+	github.com/fsnotify/fsnotify v1.6.0 // indirect
+	github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
+	github.com/go-git/go-billy/v5 v5.6.1 // indirect
+	github.com/go-git/go-git/v5 v5.13.1 // indirect
+	github.com/gogo/protobuf v1.3.2 // indirect
+	github.com/golang/glog v1.2.4 // indirect
+	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
+	github.com/google/uuid v1.6.0 // indirect
+	github.com/grpc-ecosystem/grpc-opentracing v0.0.0-20180507213350-8e809c8a8645 // indirect
+	github.com/hashicorp/errwrap v1.1.0 // indirect
+	github.com/hashicorp/go-multierror v1.1.1 // indirect
+	github.com/hashicorp/hcl/v2 v2.22.0 // indirect
+	github.com/inconshreveable/mousetrap v1.1.0 // indirect
+	github.com/iwdgo/sigintwindows v0.2.2 // indirect
+	github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
+	github.com/kevinburke/ssh_config v1.2.0 // indirect
+	github.com/lucasb-eyer/go-colorful v1.2.0 // indirect
+	github.com/mattn/go-isatty v0.0.20 // indirect
+	github.com/mattn/go-localereader v0.0.1 // indirect
+	github.com/mattn/go-runewidth v0.0.15 // indirect
+	github.com/mitchellh/go-ps v1.0.0 // indirect
+	github.com/mitchellh/go-wordwrap v1.0.1 // indirect
+	github.com/muesli/ansi v0.0.0-20230316100256-276c6243b2f6 // indirect
+	github.com/muesli/cancelreader v0.2.2 // indirect
+	github.com/muesli/reflow v0.3.0 // indirect
+	github.com/muesli/termenv v0.15.2 // indirect
+	github.com/nxadm/tail v1.4.11 // indirect
+	github.com/opentracing/basictracer-go v1.1.0 // indirect
+	github.com/opentracing/opentracing-go v1.2.0 // indirect
+	github.com/pgavlin/fx v0.1.6 // indirect
+	github.com/pjbgf/sha1cd v0.3.0 // indirect
+	github.com/pkg/errors v0.9.1 // indirect
+	github.com/pkg/term v1.1.0 // indirect
+	github.com/pmezard/go-difflib v1.0.0 // indirect
+	github.com/pulumi/appdash v0.0.0-20231130102222-75f619a67231 // indirect
+	github.com/pulumi/esc v0.14.2 // indirect
+	github.com/rivo/uniseg v0.4.4 // indirect
+	github.com/rogpeppe/go-internal v1.12.0 // indirect
+	github.com/sabhiram/go-gitignore v0.0.0-20210923224102-525f6e181f06 // indirect
+	github.com/santhosh-tekuri/jsonschema/v5 v5.0.0 // indirect
+	github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 // indirect
+	github.com/skeema/knownhosts v1.3.0 // indirect
+	github.com/spf13/cobra v1.8.0 // indirect
+	github.com/spf13/pflag v1.0.5 // indirect
+	github.com/texttheater/golang-levenshtein v1.0.1 // indirect
+	github.com/uber/jaeger-client-go v2.30.0+incompatible // indirect
+	github.com/uber/jaeger-lib v2.4.1+incompatible // indirect
+	github.com/xanzy/ssh-agent v0.3.3 // indirect
+	github.com/zclconf/go-cty v1.13.2 // indirect
+	go.uber.org/atomic v1.9.0 // indirect
+	golang.org/x/crypto v0.37.0 // indirect
+	golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 // indirect
+	golang.org/x/mod v0.19.0 // indirect
+	golang.org/x/net v0.39.0 // indirect
+	golang.org/x/sync v0.13.0 // indirect
+	golang.org/x/sys v0.32.0 // indirect
+	golang.org/x/term v0.31.0 // indirect
+	golang.org/x/text v0.24.0 // indirect
+	golang.org/x/tools v0.23.0 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20240814211410-ddb44dafa142 // indirect
+	google.golang.org/grpc v1.67.1 // indirect
+	google.golang.org/protobuf v1.36.6 // indirect
+	gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 // indirect
+	gopkg.in/warnings.v0 v0.1.2 // indirect
+	gopkg.in/yaml.v3 v3.0.1 // indirect
+	lukechampine.com/frand v1.4.2 // indirect
+)