diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
index 42ce93f9..ffff3aad 100644
--- a/.github/workflows/push.yml
+++ b/.github/workflows/push.yml
@@ -7,13 +7,14 @@ on:
         - "renovate/*"
 jobs:
   preview:
-    name: Preview
+    name: Preview-Prod
+    environment: development
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false
       matrix:
         workdir: [ l1, l2 ]
-        stack: [hetzner]
+        stack: [openstack]
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4.1.0
@@ -34,3 +35,32 @@ jobs:
           stack-name: ${{ matrix.stack }}
         env:
           PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }}
+  preview-prod:
+    name: Preview-Prod
+    runs-on: ubuntu-latest
+    environment: prod
+    strategy:
+      fail-fast: false
+      matrix:
+        workdir: [ l1, l2 ]
+        stack: [hetzner]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4.1.0
+        with:
+          node-version: '19.9.0'
+      - name: Decode kubeconfig
+        run: |
+          mkdir -p $HOME/.kube
+          echo "${{ secrets.KUBE_CONFIG }}" | base64 -d >  $HOME/.kube/config
+          cat $HOME/.kube/config
+        shell: bash
+      - run: npm install
+        working-directory: ${{ matrix.workdir }}
+      - uses: pulumi/actions@v6
+        with:
+          command: preview
+          work-dir: ${{ matrix.workdir }}
+          stack-name: ${{ matrix.stack }}
+        env:
+          PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }}