Operations

Operational guides for running Pulumi ESC day-to-day: managing secrets in existing environments, rotating credentials, deploying rotation connectors into private networks, and injecting environment values into commands and CI pipelines.

If you are looking for what ESC is rather than how to run it, start with Concepts. For reference on the YAML syntax that defines an environment, see Environments.

Working with environments

• Manage secrets — add, read, and organize secrets inside an environment.
• Approvals — require explicit review and sign-off before applying changes to environments.

Rotation

• Rotation connectors — deploy connectors so rotators can reach databases and services in private networks.

CI/CD

For continuous integration, the GitHub Actions integration wires ESC short-lived credentials into your workflows. See also the gh-login provider for ESC-issued GitHub App credentials.