access/Makefile
Den Delimarsky f8d6ec117c
Enable --refresh on pulumi up to detect drift (#83)
GitHub org invitations expire after 7 days if not accepted. When that
happens, Pulumi state still shows the TeamMembership as healthy and
reports 'unchanged' on every deploy, so the user silently stays out of
the team forever.

Adding --refresh makes pulumi read actual GitHub state before diffing,
so expired memberships are detected and recreated (resending the invite).

Currently affected: liady, antonpk1, keithagroves all have expired
invites and are missing from their configured teams.

🏠 Remote-Dev: homespace
2026-03-19 11:34:35 +00:00

19 lines
806 B
Makefile

.PHONY: help login preview refresh up
# Default target
help: ## Show this help message
@echo "Available targets:"
@grep -E '^[a-zA-Z_-]+:.*?## .*$$' $(MAKEFILE_LIST) | sort | awk 'BEGIN {FS = ":.*?## "}; {printf " %-20s %s\n", $$1, $$2}'
# Production stack commands
login: ## Login to Pulumi backend (GCS)
pulumi login gs://mcp-access-prod-pulumi-state
preview: login ## Preview infrastructure changes
PULUMI_CONFIG_PASSPHRASE_FILE=passphrase.prod.txt pulumi preview --stack prod
refresh: login ## Refresh state to match reality
PULUMI_CONFIG_PASSPHRASE_FILE=passphrase.prod.txt pulumi refresh --yes --stack prod
up: login ## Deploy infrastructure (with refresh to detect drift, e.g. expired org invites)
PULUMI_CONFIG_PASSPHRASE_FILE=passphrase.prod.txt pulumi up --refresh --yes --stack prod