Merge pull request #331 from B-urb/development

Development

.github/workflows/deploy_prod.yml

@@ -7,7 +7,30 @@ env:
   CI: true
 
 jobs:
-  pulumi-deploy:
+  pulumi-deploy-dev:
+    environment: dev
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+      - run: npm install
+      - name: Decode kubeconfig
+        run: |
+          mkdir -p $HOME/.kube
+          echo "${{ secrets.KUBE_CONFIG }}" | base64 -d >  $HOME/.kube/config
+          cat $HOME/.kube/config
+        shell: bash
+      - name: Deploy with Pulumi
+        uses: pulumi/actions@v6
+        with:
+          command: up
+          stack-name: openstack
+          work-dir: flux-operator
+    env:
+      PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }}
+      versionTag: ${{ github.head_ref || github.ref_name }}
+  pulumi-deploy-prod:
+    environment: prod
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code

l2/s3.ts

@@ -17,9 +17,9 @@ export function createS3Bucket(bucketName: string): S3BucketCredentials {
   const bucket = new aws.s3.Bucket(bucketName, {
     bucketPrefix: bucketName,
     acl: "private",
-  }, { provider: awsProvider });  // Use the singleton provider
+  }, { provider: awsProvider, protect: true });  // Use the singleton provider
 
-  const user = new aws.iam.User(`${bucketName}-user`, {}, { provider: awsProvider });
+  const user = new aws.iam.User(`${bucketName}-user`, {}, { provider: awsProvider, protect: true });
 
   const accessKey = new aws.iam.AccessKey(`${bucketName}-accessKey`, {
     user: user.name,