From 3f41f038e586c30beb2dab61b4c588eed3db585f Mon Sep 17 00:00:00 2001
From: Ringo De Smet <ringo@de-smet.name>
Date: Mon, 2 Dec 2024 15:03:40 +0100
Subject: [PATCH] Reapply pulumi/ci-mgmt

---
 .github/workflows/resync-build.yml | 118 +++++++++--------------------
 1 file changed, 35 insertions(+), 83 deletions(-)

diff --git a/.github/workflows/resync-build.yml b/.github/workflows/resync-build.yml
index e60043f..c83f440 100644
--- a/.github/workflows/resync-build.yml
+++ b/.github/workflows/resync-build.yml
@@ -1,89 +1,41 @@
 # WARNING: This file is autogenerated - changes will be overwritten when regenerated by https://github.com/pulumi/ci-mgmt
+name: "Resync Build Workflows"
+
+on:
+  schedule:
+    # 3 AM UTC ~ 8 PM PDT / 7 PM PST every Tuesday.
+    - cron: 0 3 * * TUE
+
+permissions:
+  contents: write
+  pull-requests: write
 
 env:
-  PULUMI_EXTRA_MAPPING_ERROR: true
-  PULUMI_MISSING_MAPPING_ERROR: true
-  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-  NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-  NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-  NUGET_PUBLISH_KEY: ${{ secrets.NUGET_PUBLISH_KEY }}
-  PUBLISH_REPO_PASSWORD: ${{ secrets.OSSRH_PASSWORD }}
-  PUBLISH_REPO_USERNAME: ${{ secrets.OSSRH_USERNAME }}
-  PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }}
-  PULUMI_API: https://api.pulumi-staging.io
-  PULUMI_GO_DEP_ROOT: ${{ github.workspace }}/..
-  PULUMI_LOCAL_NUGET: ${{ github.workspace }}/nuget
-  PYPI_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
-  PYPI_USERNAME: __token__
-  SIGNING_KEY: ${{ secrets.JAVA_SIGNING_KEY }}
-  SIGNING_KEY_ID: ${{ secrets.JAVA_SIGNING_KEY_ID }}
-  SIGNING_PASSWORD: ${{ secrets.JAVA_SIGNING_PASSWORD }}
-  TF_APPEND_USER_AGENT: pulumi
+  GITHUB_TOKEN: ${{ secrets.PULUMI_PROVIDER_AUTOMATION_TOKEN || secrets.PULUMI_BOT_TOKEN || secrets.GITHUB_TOKEN }}
+
 jobs:
-  resync_build:
-    name: resync-build
+  upgrade_provider:
+    name: pull-workflow-changes
     runs-on: ubuntu-latest
     steps:
-    - name: Checkout Repo
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      with:
-        # Persist credentials so we can push a new branch.
-        persist-credentials: true
-    - name: Checkout repo
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      with:
-        path: ci-mgmt
-        repository: pulumi/ci-mgmt
-        persist-credentials: false
-    - id: run-url
-      name: Create URL to the run output
-      run:  echo "run-url=https://github.com/$GITHUB_REPOSITORY/actions/runs/$GITHUB_RUN_ID" >> "$GITHUB_OUTPUT"
-    - name: Setup tools
-      uses: ./.github/actions/setup-tools
-      with:
-        tools: pulumictl, pulumicli, go, nodejs, dotnet, python
-    - name: Sync with ci-mgmt
-      run: cp -r "ci-mgmt/provider-ci/providers/$PROVIDER/repo/." .
-    - name: Remove ci-mgmt directory
-      run: rm -rf ci-mgmt
-    - name: Required entries for gitignore
-      run: |-
-        cat <<- EOF > "$RUNNER_TEMP/gitignore"
-        sdk/java/build
-        sdk/java/.gradle
-        sdk/java/gradle
-        sdk/java/gradlew
-        sdk/java/gradlew.bat
-        EOF
-      shell: bash
-    - name: Adding missing lines to .gitignore
-      run: |
-        comm -23 <(sort "$RUNNER_TEMP/gitignore") <(sort .gitignore) >> .gitignore.temp
-        cat .gitignore.temp >> .gitignore
-        rm .gitignore.temp
-      shell: bash
-    - name: Build
-      run: make build
-    - name: Create PR (no linked issue)
-      uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f # v7.0.5
-      with:
-        author: pulumi-bot <bot@pulumi.com>
-        base: main
-        body: This pull request was generated automatically by the resync-build workflow
-          in this repository.
-        branch: pulumi-bot/resync-${{ github.run_id}}
-        commit-message: Resync build for pulumi-acme
-        committer: pulumi-bot <bot@pulumi.com>
-        labels: impact/no-changelog-required
-        team-reviewers: platform-integrations
-        title: Fix up build for pulumi-acme
-        token: ${{ secrets.PULUMI_BOT_TOKEN }}
-name: Resync build
-on:
-  workflow_dispatch:
-    inputs:
-      automerge:
-        default: false
-        description: Mark created PR for auto-merging?
-        required: true
-        type: boolean
+      - name: Checkout Repo
+        uses: actions/checkout@v4
+        with:
+          # Persist credentials so pull-workflow-changes can push a new branch.
+          persist-credentials: true
+      - name: Regenerate the workflow files via https://github.com/pulumi/ci-mgmt
+        run: |
+          make ci-mgmt
+      - name: Create PR (no linked issue)
+        uses: peter-evans/create-pull-request@v3.12.0
+        with:
+          author: pulumi-bot <bot@pulumi.com>
+          base: main
+          body: This pull request was generated automatically by the resync-build workflow
+            in this repository.
+          branch: chore/resync-${{ github.run_id }}
+          commit-message: Regenerate workflows for pulumi-acme
+          committer: pulumi-bot <bot@pulumi.com>
+          labels: impact/no-changelog-required
+          title: Regenerate Github Actions workflows for pulumi-acme
+          token: ${{ env.GITHUB_TOKEN }}