Pulumi enable upgrade pipeline

This CI can be run when there is a new terraform provider version present.
Afterwards a PR is created which updates the bridge and the provider.

Signed-off-by: Alexander Dahmen <[email protected]>

Author: Fyusel

.github/workflows/upgrade-provider.yaml

@@ -1,23 +1,43 @@
+name: Upgrade provider
+
+permissions:
+  contents: write
+  pull-requests: write
+
+on:
+  issues:
+    types:
+    - opened
+  workflow_dispatch: {}
+
 env:
-  GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+  GH_TOKEN: ${{ secrets.PR_TOKEN }}
+
 jobs:
   upgrade_provider:
     if: ${{ (contains(github.event.issue.title, 'Upgrade terraform-provider-')) || github.event_name == 'workflow_dispatch' }}
     name: upgrade-provider
     runs-on: ubuntu-latest
     steps:
+    # TODO: remove when this repo is made public
+    - name: Configure Git for Private Modules
+      run: |
+        git config --global url."https://oauth2:${{ secrets.PR_TOKEN }}@github.com".insteadOf "https://github.com"
+        # Sets GOPRIVATE and GONOSUMDB in order to use the git authetnication for go mod.
+        echo "GOPRIVATE=github.com/${{ github.repository }}/*,github.com/stackitcloud/*" >> $GITHUB_ENV
+        echo "GONOSUMDB=github.com/${{ github.repository }}/*,github.com/stackitcloud/*" >> $GITHUB_ENV
+    # TODO: remove end
+    - name: Install misc
+      run: |
+        sudo apt update -y && sudo apt install -y curl
+        sudo install -dm 755 /etc/apt/keyrings
+        curl -fSs https://mise.jdx.dev/gpg-key.pub | sudo tee /etc/apt/keyrings/mise-archive-keyring.pub 1> /dev/null
+        echo "deb [signed-by=/etc/apt/keyrings/mise-archive-keyring.pub arch=amd64] https://mise.jdx.dev/deb stable main" | sudo tee /etc/apt/sources.list.d/mise.list
+        sudo apt update
+        sudo apt install -y mise
     - name: Call upgrade provider action
       uses: pulumi/pulumi-upgrade-provider-action@e247104aede3eb4641f48c8ad0ea9de9346f2457 # v0.0.18
       with:
         kind: all
-name: Upgrade provider
 
-permissions:
-  contents: write
-  pull-requests: write
 
-on:
-  issues:
-    types:
-    - opened
-  workflow_dispatch: {}