diff --git a/.github/workflows/upgrade-provider.yml b/.github/workflows/upgrade-provider.yml
new file mode 100644
index 0000000..8f94791
--- /dev/null
+++ b/.github/workflows/upgrade-provider.yml
@@ -0,0 +1,29 @@
+# WARNING: This file is autogenerated - changes will be overwritten if not made via https://github.com/pulumi/ci-mgmt
+name: Upgrade provider
+
+on:
+  issues:
+    types:
+    - opened
+  workflow_dispatch: {}
+
+env:
+  GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+jobs:
+  upgrade_provider:
+    if: ${{ (github.event.issue.user.login == 'pulumi-bot' && contains(github.event.issue.title, 'Upgrade terraform-provider-')) || github.event_name == 'workflow_dispatch' }}
+    name: upgrade-provider
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
+    runs-on: ubuntu-latest
+    steps:
+    - name: Call upgrade provider action
+      uses: pulumi/pulumi-upgrade-provider-action@v0.0.12
+      with:
+        kind: all
+        email: bot@pulumi.com
+        username: pulumi-bot