feat: add automatic deployments of support bot infra (#1272)

Signed-off-by: drptbl <jakub.mucha@icloud.com>

Author: drptbl

pnpm-lock.yaml

@@ -4,4 +4,4 @@ packages:
   - "examples/*"
   - "release"
   - "docs"
-  - "support-bot"
+  - "support-bot/*"

pnpm-workspace.yaml

@@ -0,0 +1,5 @@
+encryptionsalt: v1:sWT/mMw+Vh8=:v1:E7nHaX+HYvauMdyx:m7XabdAaqeh1RpCULGOaGlkCX/s9ZA==
+config:
+  gcp:project: synpress
+  gcp:zone: us-central1-b
+  gcp:region: us-central1

support-bot/infra/Pulumi.dev.yaml

@@ -0,0 +1,6 @@
+name: support-bot
+description: Support Bot infrastructure for GCP deployment
+runtime:
+  name: nodejs
+  options:
+    packagemanager: pnpm

support-bot/infra/Pulumi.yaml

@@ -0,0 +1,125 @@
+import * as gcp from '@pulumi/gcp'
+import * as pulumi from '@pulumi/pulumi'
+
+// Get GCP configuration
+const gcpConfig = new pulumi.Config('gcp')
+const projectId = gcpConfig.require('project')
+const zone = gcpConfig.require('zone')
+const region = gcpConfig.require('region')
+
+// Create a new network
+const network = new gcp.compute.Network('synpress-support-bot-network', {
+  autoCreateSubnetworks: true
+})
+
+// Create a firewall rule to allow incoming traffic
+const firewall = new gcp.compute.Firewall('synpress-support-bot-firewall', {
+  network: network.name,
+  allows: [
+    {
+      protocol: 'tcp',
+      ports: ['22']
+    }
+  ],
+  sourceRanges: ['0.0.0.0/0'],
+  targetTags: ['synpress-support-bot']
+})
+
+// Create a service account for the VM
+const serviceAccount = new gcp.serviceaccount.Account('synpress-support-bot-sa', {
+  accountId: 'synpress-support-bot-sa',
+  displayName: 'Synpress Support Bot Service Account'
+})
+
+// Add necessary IAM roles to the service account
+const roles = [
+  'roles/logging.logWriter',
+  'roles/monitoring.metricWriter',
+  'roles/monitoring.viewer',
+  'roles/stackdriver.resourceMetadata.writer'
+]
+
+roles.forEach((role, i) => {
+  new gcp.projects.IAMBinding(`synpress-support-bot-iam-binding-${i}`, {
+    project: projectId,
+    role: role,
+    members: [pulumi.interpolate`serviceAccount:${serviceAccount.email}`]
+  })
+})
+
+const instanceStartupScript = pulumi.interpolate`#!/bin/bash
+        set -e  # Exit on error
+        set -x  # Print commands for debugging
+
+        echo "Starting installation process..."
+        # Install Node.js and npm
+        curl -fsSL https://deb.nodesource.com/setup_22.x | bash -
+        apt-get install -y nodejs
+
+        # Install pnpm
+        npm install -g pnpm
+
+        # Create app directory
+        mkdir -p /opt/support-bot
+        cd /opt/support-bot
+
+        # Clone repo
+        git clone https://github.com/Synthetixio/synpress.git
+        cd synpress
+        git checkout dev
+
+        # Install dependencies and start the bot
+        pnpm install
+        cd support-bot
+        pnpm build
+        pnpm start
+`
+
+// Create a VM instance
+const instance = new gcp.compute.Instance('synpress-support-bot-instance', {
+  machineType: 'e2-micro',
+  zone: zone,
+  bootDisk: {
+    initializeParams: {
+      image: 'ubuntu-os-cloud/ubuntu-2004-lts',
+      size: 10,
+      type: 'pd-ssd', // Use SSD
+      labels: {
+        environment: 'production',
+        managed_by: 'pulumi',
+        application: 'synpress-support-bot'
+      }
+    },
+    autoDelete: true,
+    deviceName: 'synpress-support-bot-boot-disk'
+  },
+  networkInterfaces: [
+    {
+      network: network.name
+    }
+  ],
+  serviceAccount: {
+    email: serviceAccount.email,
+    scopes: ['https://www.googleapis.com/auth/cloud-platform']
+  },
+  metadataStartupScript: instanceStartupScript,
+  labels: {
+    environment: 'production',
+    managed_by: 'pulumi',
+    application: 'synpress-support-bot'
+  },
+  tags: ['synpress-support-bot']
+})
+
+// Create a Cloud Storage bucket for bot data and logs
+const bucket = new gcp.storage.Bucket('synpress-support-bot-bucket', {
+  location: region,
+  uniformBucketLevelAccess: true
+})
+
+// Grant the service account access to the bucket
+const bucketIAM = new gcp.storage.BucketIAMMember('synpress-support-bot-bucket-iam', {
+  bucket: bucket.name,
+  role: 'roles/storage.objectViewer',
+  member: pulumi.interpolate`serviceAccount:${serviceAccount.email}`
+})

support-bot/infra/index.ts

@@ -0,0 +1,13 @@
+{
+  "name": "support-bot-infra",
+  "private": true,
+  "main": "index.ts",
+  "dependencies": {
+    "@pulumi/gcp": "8.19.1",
+    "@pulumi/pulumi": "3.150.0"
+  },
+  "devDependencies": {
+    "@types/node": "22.13.4",
+    "typescript": "5.7.3"
+  }
+}

support-bot/infra/package.json

@@ -0,0 +1,17 @@
+{
+  "compilerOptions": {
+    "strict": true,
+    "outDir": "bin",
+    "target": "es2016",
+    "module": "commonjs",
+    "moduleResolution": "node",
+    "sourceMap": true,
+    "experimentalDecorators": true,
+    "pretty": true,
+    "noFallthroughCasesInSwitch": true,
+    "noImplicitReturns": true,
+    "forceConsistentCasingInFileNames": true,
+    "esModuleInterop": true
+  },
+  "files": ["index.ts"]
+}

support-bot/infra/tsconfig.json

@@ -1,6 +1,7 @@
 {
   "name": "@synpress/support-bot",
   "version": "0.1.0",
+  "private": true,
   "description": "Discord support bot using Gemini AI for Synpress",
   "type": "module",
   "main": "dist/index.js",