Skip to main content
Sign in Dashboard Get started
  1. Docs
  2. Secrets & Configuration
  3. Guides

Guides

    How-to guides for consuming Pulumi ESC from the tools you already use. Each page is a self-contained walkthrough — install steps, the YAML or commands you need, and where ESC fits in the flow.

    For first-party ESC integrations (the Pulumi Service Provider, Automation API, the VS Code extension, the External Secrets Operator, and the Secrets Store CSI Driver), see Integrations.

    Authentication

    • Configuring OIDC — set up OpenID Connect trust between ESC and AWS, Azure, GCP, Doppler, Infisical, or Vault.

    Use ESC with Pulumi IaC

    Development tools

    • Run commands with esc run — inject environment values into any command or script.
    • Docker — load environment variables and secrets into Docker workflows.
    • direnv — load ESC values automatically when you cd into a directory.

    CI / CD

    • GitHub Actions — inject ESC values and short-lived cloud credentials into workflows.

    Kubernetes

    Infrastructure tools

    • Terraform — supply temporary credentials and input variables to the Terraform CLI via esc run.

    Cloud platforms

    • Cloudflare — manage Cloudflare Workers secrets via ESC.