Create a CI user, add to environmental admin group (#1222)

* Create a CI user, add to environmental admin group

* Lint

Author: ryanjjung

pulumi/__main__.py

@@ -113,7 +113,20 @@
         **automaton_opts,
     )
 
+
+def __sap_on_apply(resources):
+    ci_user_name = f'{project.name_prefix}-ci'
+    tb_pulumi.iam.UserWithAccessKey(
+        ci_user_name,
+        project=project,
+        user_name=ci_user_name,
+        groups=[resources['admin_group']],
+        opts=pulumi.ResourceOptions(depends_on=[sap]),
+    )
+
+
 sap = tb_pulumi.iam.StackAccessPolicies(
     f'{project.name_prefix}-sap',
     project=project,
+    on_apply=__sap_on_apply,
 )

pulumi/requirements.txt

@@ -1,2 +1,3 @@
-tb_pulumi @ git+https://github.com/thunderbird/pulumi.git@v0.0.15
+tb_pulumi @ git+https://github.com/thunderbird/pulumi.git@main
 pulumi_cloudflare==6.3.1
+