A mini Reddit app Deployed to CloudRun with Pulumi ESC & IAC (Meteor & MongoDB Atlas)

This is a submission for the Pulumi Deploy and Document Challenge: Shhh, It's a Secret! What I Built This project demonstrates a comprehensive approach to secure cloud infrastructure deployment using Pulumi's Environments, Secrets, and Configuration (ESC) platform. I've built a mini Reddit-style application (based on Meteor framework) that showcases how to implement infrastructure as code with proper secret management when deploying to Google Cloud Run. By leveraging Pulumi ESC's unified secrets management capabilities, this project illustrates how development and operations teams can collaborate seamlessly while maintaining security best practices. The application connects to a MongoDB Atlas database with sensitive connection strings and credentials securely stored, accessed, and rotated through Pulumi ESC's SDK. This implementation demonstrates how organizations can: Manage sensitive configuration across different environments (development, staging, production) Securely handle database credentials and API keys without exposing them in code Implement infrastructure as code using familiar programming languages Automate deployment workflows while maintaining security controls Establish a foundation for scalable, secure cloud infrastructure management The documentation provides a step-by-step guide for implementing similar solutions, making it accessible for developers, infrastructure teams, and security professionals looking to enhance their cloud security posture while accelerating deployment cycles. This project showcases: Secure Secret Management: Using Pulumi ESC to securely store and access the MongoDB connection string Containerization: Packaging a Meteor 3 application in a Docker container Cloud Deployment: Deploying the containerized app to Google Cloud Run Infrastructure as Code: Defining all infrastructure using Pulumi Meteor Application: A simple Meteor 3 app with BlazeJS MongoDB Atlas: A managed MongoDB database Live Demo Link Live Demo: Mini Reddit Project Repo Mooptcom / meteor-pulumi-esc Meteor app deployed to Cloud Run with Pulumi ESC Meteor App Deployment with Pulumi ESC This repository demonstrates how to securely deploy a Meteor 3 application to Google Cloud Run using Pulumi ESC for secret management. The application connects to a MongoDB Atlas database, with the connection string securely stored and accessed using Pulumi ESC. This project was created for the Pulumi Deploy and Document Challenge: Shhh, It's a Secret! Real-time Demo: https://meteor-app-service-b378141-szyom6qpxq-uc.a.run.app or https://meteor-app-service-b378141-1099397202050.us-central1.run.app/ Demo video: https://youtu.be/V2-wESswkV8 and https://www.youtube.com/watch?v=O5kcxLiycJM

Apr 6, 2025 - 05:16

This is a submission for the Pulumi Deploy and Document Challenge: Shhh, It's a Secret!

What I Built

This project demonstrates a comprehensive approach to secure cloud infrastructure deployment using Pulumi's Environments, Secrets, and Configuration (ESC) platform. I've built a mini Reddit-style application (based on Meteor framework) that showcases how to implement infrastructure as code with proper secret management when deploying to Google Cloud Run.

By leveraging Pulumi ESC's unified secrets management capabilities, this project illustrates how development and operations teams can collaborate seamlessly while maintaining security best practices. The application connects to a MongoDB Atlas database with sensitive connection strings and credentials securely stored, accessed, and rotated through Pulumi ESC's SDK.

This implementation demonstrates how organizations can:

Manage sensitive configuration across different environments (development, staging, production)
Securely handle database credentials and API keys without exposing them in code
Implement infrastructure as code using familiar programming languages
Automate deployment workflows while maintaining security controls
Establish a foundation for scalable, secure cloud infrastructure management

The documentation provides a step-by-step guide for implementing similar solutions, making it accessible for developers, infrastructure teams, and security professionals looking to enhance their cloud security posture while accelerating deployment cycles.

This project showcases:

Secure Secret Management: Using Pulumi ESC to securely store and access the MongoDB connection string
Containerization: Packaging a Meteor 3 application in a Docker container
Cloud Deployment: Deploying the containerized app to Google Cloud Run
Infrastructure as Code: Defining all infrastructure using Pulumi
Meteor Application: A simple Meteor 3 app with BlazeJS
MongoDB Atlas: A managed MongoDB database

Live Demo Link

Live Demo: Mini Reddit

Project Repo

Mooptcom / meteor-pulumi-esc

Meteor app deployed to Cloud Run with Pulumi ESC

Meteor App Deployment with Pulumi ESC

This repository demonstrates how to securely deploy a Meteor 3 application to Google Cloud Run using Pulumi ESC for secret management. The application connects to a MongoDB Atlas database, with the connection string securely stored and accessed using Pulumi ESC.

This project was created for the Pulumi Deploy and Document Challenge: Shhh, It's a Secret!