Easier infrastructure and safer secrets with Pulumi, Azure, and .Net Core
summary
Shows a working demo that uses Pulumi with Azure Key Vault and GitHub Actions to create repeatable, idempotent infrastructure and keep runtime secrets out of developer repos. The code builds an ASP.NET Core app into a container, pushes to an Azure Container Registry, creates app service + managed identity, stores generated connection strings in Key Vault, and configures CI to deploy dev and prod stacks separately. The pipeline and demo deploy cleanly and the app reads secrets via Azure identity, avoiding checked‑in credentials.
AI-written summary · about
chapters (11)
- 0:00Introduction and goals
- 1:28Agenda overview
- 2:18Infrastructure automation
- 7:46Introduction to Pulumi
- 10:02Pulumi core concepts
- 15:15Pulumi state management
- 17:09Pulumi demonstration
- 25:21Secrets management
- 30:29ASP.NET Core secrets
- 34:08Complex secrets demo
- 45:45CI/CD and best practices
related talks
42mService Principals and Managed Identities
51mService Principals and Managed Identities - the Identity tools every Azure developer should know
55mEverything a .NET dev needs to know about configuration and secret management
01h 03mBuilding Secure Microservices in Azure
57mAPIs for Infrastructure… on steroids
08mInfrastructure as code in any programming language
01h 04mPermit to Cloud - Land with confidence in Azure
58mSelf service infrastructure using pulumi automation