diff --git a/backend/src/ee/services/EELicenseService.ts b/backend/src/ee/services/EELicenseService.ts index 733bf80e0..84d958eb7 100644 --- a/backend/src/ee/services/EELicenseService.ts +++ b/backend/src/ee/services/EELicenseService.ts @@ -62,7 +62,7 @@ class EELicenseService { environmentLimit: null, environmentsUsed: 0, secretVersioning: true, - pitRecovery: false, + pitRecovery: true, ipAllowlisting: false, rbac: false, customRateLimits: false, diff --git a/docs/documentation/getting-started/platform.mdx b/docs/documentation/getting-started/platform.mdx index b8cf2ae6e..429524161 100644 --- a/docs/documentation/getting-started/platform.mdx +++ b/docs/documentation/getting-started/platform.mdx @@ -42,7 +42,7 @@ In the above image, you can already see that: ### Dashboard The secrets dashboard lets you manage secrets for a specific environment in a project. -Here, developers can [override secrets](//project#personal-overrides), [version secrets](/documentation/platform/secret-versioning), [rollback projects to any point in time](/documentation/platform/pit-recovery), and much more. +Here, developers can override secrets, version secrets, rollback projects to any point in time and much more. ![dashboard](../../images/dashboard.png) diff --git a/docs/documentation/platform/audit-logs.mdx b/docs/documentation/platform/audit-logs.mdx index 0b70e8294..5e6adb8e7 100644 --- a/docs/documentation/platform/audit-logs.mdx +++ b/docs/documentation/platform/audit-logs.mdx @@ -16,7 +16,7 @@ With this feature, teams can track 25+ different events; filter audit logs by event, actor, source, date or any combination of these filters; and inspect extensive metadata in the event of any suspicious activity or incident review. -![Audit logs](../../images/audit-logs.png) +![Audit logs](../../images/platform/audit-logs/audit-logs-table.png) Each log contains the following data: diff --git a/docs/documentation/platform/folder.mdx b/docs/documentation/platform/folder.mdx index 506b30da2..162cabfb9 100644 --- a/docs/documentation/platform/folder.mdx +++ b/docs/documentation/platform/folder.mdx @@ -3,28 +3,50 @@ title: "Folders" description: "Organize your secrets with folders" --- -Folders provide a powerful and intuitive way to structure your secrets. -They offer a system to keep your secrets organized and easily accessible, which becomes increasingly important as your collection of secrets grows. +Infisical's folder feature lets you store secrets at a specific folder; we also call this **path-based secret storage**. +This is great for organizing secrets around hierarchies when multiple services, types of secrets, etc. are involved at great quantities. +With folders that can go infinitely deep, you can mirror your application architecture (be it microservices or monorepos) +or any logical grouping that best suits your needs. -With folders in Infisical, you can now create a hierarchy of folders to organize your secrets, mirroring your application's architecture or any logical grouping that suits your needs. -Whether you follow a microservices architecture or work with monorepos, folders make it simpler to locate, manage and collaborate between teams. +Consider the following structure for a microservice architecture: +``` +| service1 +|---- envars +|---- users +|-------- tokens1 +|-------- tokens2 +| service2 +|---- envars +... +``` -## Creating a folder +In this example, we store environment variables for each microservice under each respective `/envars` folder. +We also store user-specific secrets for micro-service 1 under `/service1/users`. With this folder structure in place, your applications only need to specify a path like `/microservice1/envars` to fetch secrets from there. +By extending this example, you can see how path-based secret storage provides a versatile approach to manage secrets for any architecture. -To create a folder, head over to the environment where you'd like to create the folder. Once there, click the `Add folder` button as shown below. -If you wish to create nested folders, simply click into the folder of choice and click `Add folder` button again. +## Folders -![dashboard add folders](../../images/dashboard-add-folder.png) +### Managing folders + +To add a folder, press the downward chevron to the right of the **Add Secret** button; then press on the **Add Folder** button. Folder names can only contain alphabets, numbers, and dashes -## Compare folders across environments +![add folder](../../images/platform/folder/folders-add.png) -The overview screen provides a comprehensive view of all your secrets and folders, organized by environment. +To delete a folder, hover over it and press the **X** button that appears on the right side. -![dashboard secret overview with folders](../../images/dashboard-folder-overview.png) +![delete folder](../../images/platform/folder/folders-delete.png) -When you click on a folder, the overview will be updated to show only the secrets and folders in that folder. This allows you to compare secrets across environment regardless of how deeply nested your folders are. +### Comparing folders + +It's possible to compare the contents of folders across environments in the **Secrets Overview** page. +When you click on a folder, the table will display the items within it across environments. + +In the image below, you can see that the **Development** environment is the only one that contains items +in the `/users` folder, being other folders `/user-a`, `/user-b`, ... `/user-f`. + +![comparing folders](../../images/platform/folder/folders-secrets-overview.png) \ No newline at end of file diff --git a/docs/documentation/platform/ip-allowlisting.mdx b/docs/documentation/platform/ip-allowlisting.mdx index 7a227137d..f0844e685 100644 --- a/docs/documentation/platform/ip-allowlisting.mdx +++ b/docs/documentation/platform/ip-allowlisting.mdx @@ -27,7 +27,7 @@ For enhanced security, we strongly recommend replacing the default entry with yo You must be a project `admin` to manage your project's IP whitelist. -![IP whitelist](../../images/project-ip-whitelist.png) +![IP whitelist](../../images/platform/ip-allowlisting/ip-allowlisting-table.png) ## Creating a trusted IP entry @@ -35,4 +35,4 @@ To create a trusted IP entry, head over to the **IP Whitelist** tab in your proj you can specify either a specific IP address like `192.0.2.1` or a CIDR range like `2001:db8::/32`; both IPv4 and IPv6 formats are accepted. -![IP whitelist add](../../images/project-ip-whitelist-add.png) +![IP whitelist add](../../images/platform/ip-allowlisting/ip-allowlisting-modal.png) diff --git a/docs/documentation/platform/pit-recovery.mdx b/docs/documentation/platform/pit-recovery.mdx index 61f94f987..3cad5eff2 100644 --- a/docs/documentation/platform/pit-recovery.mdx +++ b/docs/documentation/platform/pit-recovery.mdx @@ -3,26 +3,37 @@ title: "Point-in-Time Recovery" description: "How to rollback secrets and configs to any commit with Infisical." --- -Point-in-time recovery allows secrets to be rolled back to any point in time. -It's powered by snapshots that get created after every mutations to a secret within a given [folder](./folder) and environment. + + Point-in-Time Recovery is a paid feature. + + If you're using Infisical Cloud, then it is available under the **Team Tier**. If you're self-hosting Infisical, + then you should contact team@infisical.com to purchase an enterprise license to use it. + -## Commits +Infisical's point-in-time recovery feature allows secrets to be rolled back to any point in time for any given [folder](./folder). +Under the hood, snapshots, capturing the state of the folder, get taken after any mutation an item within that folder. -Similar to Git, a commit in Infisical is a snapshot of your project's secrets at a specific point in time scoped to the environment and [folder](./folder) it is in. You can browse and view your project's snapshots via the "Point-in-Time Recovery" sidebar. +## Snapshots -![PIT commits](../../images/pit-commits.png) -![PIT snapshots](../../images/pit-snapshots.png) +Similar to Git, a commit (aka snapshot) in Infisical is the state of your project's secrets at a specific point in time scoped to +an environment and [folder](./folder) within it. + +To view a list of snapshots for the current folder, press the **Commits** button. + +![PIT commits](../../images/platform/pit-recovery/pit-recovery-commits.png) + +This opens up a sidebar from which you can select to view a particular snapshot: + +![PIT snapshots](../../images/platform/pit-recovery/pit-recovery-commits-drawer.png) ## Rolling back -Secrets can be rolled back to any point in time via the "Rollback to this snapshot" button. This will roll back the changes within the given [folder](./folder) and environment to the chosen time. +After pressing on a snapshot from the sidebar, you can view it and even roll back the state +of the folder to that point in time by pressing the **Rollback** button. -It's important to note that this rollback action is localized and does not affect other folders within the same environment. This means each [folder](./folder) maintains its own independent history of changes, offering precise and isolated control over rollback actions. -In essence, every [folder](./folder) possesses a distinct and separate timeline, providing granular control when managing your secrets. +![PIT snapshot](../../images/platform/pit-recovery/pit-recovery-rollback.png) -![PIT snapshot](../../images/pit-snapshot.png) +Rolling back secrets to a past snapshot creates a creates a snapshot at the top of the stack and updates secret versions. - - Rolling back secrets to a past snapshot creates a new commit, - creates a snapshot at the top of the stack and updates secret versions. - +Note that rollbacks are localized to not affect other folders within the same environment. This means each [folder](./folder) maintains its own independent history of changes, offering precise and isolated control over rollback actions. +Put differently, every [folder](./folder) possesses a distinct and separate timeline, providing granular control when managing your secrets. diff --git a/docs/documentation/platform/project.mdx b/docs/documentation/platform/project.mdx index f63553fd4..19e5179a4 100644 --- a/docs/documentation/platform/project.mdx +++ b/docs/documentation/platform/project.mdx @@ -14,50 +14,90 @@ This is useful for comparing secrets, identifying if anything is missing, and ma ## Secrets Dashboard -The **Secrets Dashboard** page appears when you press to manage the secrets of a particular environment. +The **Secrets Dashboard** page appears when you press to manage the secrets of a specific environment. ![project dashboard](../../images/dashboard.png) ### Secrets -Secrets can be added to or removed from a project. By default, they are pre-populated in your first project for demonstration. -For any subsequent project, if applicable, it can be convenient to add items by dragging and dropping a .env file containing them. +To add a secret, press **Add Secret** button at the top of the dashboard. -Here's what dragging and dropping a .env looks like: +![project add secret](../../images/platform/project/project-secrets-add.png) -![project drag and drop](../../images/project-drag-drop.png) +For a new project, it can be convenient to populate the dashboard by dropping a `.env` file into the provided pane as shown below: -### Environments +![project drop env file](../../images/platform/project/project-secrets-drop-env.png) -In most cases, environment variables belong to specific environments: development, staging, testing, and production. You can input environment variables for each environment that your project uses. +To delete a secret, hover over it and press the **X** button that appears on the right side. -![project environment](../../images/project-environment.png) +![project delete secret](../../images/platform/project/project-secrets-delete.png) -### Personal overrides +To delete multiple secrets at once, hover over and select the secrets you'd like to delete +and press the **Delete** button that appears at the top. -Every environment variable value can be overridden with a custom value. - -- An overridden value can only be read and accessed by the user that overrode the original shared value. -- A (default) shared value can be read and accessed by other users in a project. - -You can turn overrides on/off by toggling the override/branch icon: - -![project variable toggle open](../../images/project-envar-override.png) +![project delete secret batch](../../images/platform/project/project-secrets-delete-batch.png) ### Search -You can search for any environment variable by its key. +To search for specific secrets by their key name, you can use the search bar. -![project search](../../images/project-search.png) +![project search](../../images/platform/project/project-secrets-search.png) + +To assist you with finding secrets, you can also group them by similar prefixes and filter them by tags (if applicable). + +![project filter](../../images/platform/project/project-secrets-filter.png) ### Hide/Un-hide -You can hide or un-hide the values of your environment variables. By default, the values are hidden for your privacy. +To view/hide all secrets at once, toggle the hide or un-hide button. -![project hide](../../images/project-hide.png) +![project filter](../../images/platform/project/project-secrets-unhide.png) ### Download as .env -You can download your environment variables back in a .env file. +To download/export secrets back into a `.env` file, press the download button. + +![project download back env](../../images/platform/project/project-secrets-download-env.png) + +### Tags + +To better organize similar secrets, hover over them and label them with a tag. + +![project tag secret](../../images/platform/project/project-secrets-tag.png) + +### Comments + +To provide more context about a given secret, especially for your team, hover over it and press the comment button. + +![project comment secret](../../images/platform/project/project-secrets-comment.png) + +### Personal overrides + +Infisical employs the concept of **shared** and **personal** secrets to address the need +for common and custom secret values, or branching, amongst members of a team during software development. +To provide a helpful analogy: A shared value is to a `main` branch as a personal value is to a custom branch. + +Consider: + +- A team with users A, B, user C. +- A project with an environment containing a shared secret called D with the value E. + +Suppose user A overrides the value of secret D with the value F. + +Then: + +- If user A fetches the secret D back, they get the value F. +- If users B and C fetch the secret D back, they both get the value E. + +![project override secret](../../images/platform/project/project-secrets-override.png) + +### Drawer + +To view the full details of each secret, you can hover over it and press on the ellipses button. + +![project secrets ellipses](../../images/platform/project/project-secrets-ellipses.png) + +This opens up a side-drawer: + +![project secrets drawer](../../images/platform/project/project-secrets-drawer.png) -![project download](../../images/project-download.png) diff --git a/docs/documentation/platform/secret-reference.mdx b/docs/documentation/platform/secret-reference.mdx index d0d750330..940e7b263 100644 --- a/docs/documentation/platform/secret-reference.mdx +++ b/docs/documentation/platform/secret-reference.mdx @@ -1,23 +1,39 @@ --- -title: "Reference and Import Secrets" +title: "Secret Referencing / Importing" description: "How to use reference secrets in Infisical" --- -Secret referencing is a powerful feature that allows you to values of other secrets. This way, you just need to update the secret value once for it to be propagated to all the references. +## Secret Referencing -Consider a scenario where you have a database password. In order to utilize this password, you may need to incorporate it into a database connection string. -With secret referencing, you can easily construct these more intricate secrets by directly referencing the base secret. -This centralizes the management of your base secret, as any updates made to it will automatically propagate to all the secrets that depend on it. +Infisical's secret referencing feature lets you reference the value of a "base" secret when defining the value of another secret. +This means that updating the value of a base secret propagates directly to other secrets whose values depend on the base secret. -## Referencing syntax - + + Currently, the secret referencing feature is only supported by the + [Infisical CLI](/cli/overview) and [native integrations](/integrations/overview). -Secret referencing relies on interpolation syntax. This syntax allows you to reference a secret in any environment or [folder](./folder). + We intend to add support for it to the [Node SDK](https://github.com/Infisical/infisical-node) + and [Python SDK](https://github.com/Infisical/infisical-python) this quarter. + -To reference a secret named 'mysecret' in the same [folder](./folder) and environment, you'd use `${mysecret}`. -However, to reference the same secret at the root of a different environment, for instance `dev` environment, you'd use `${dev.mysecret}`. +![secret referencing](../../images/platform/secret-references-imports/secret-reference.png) -Here are a few more examples to help you understand how to reference secrets in different contexts: +Since secret referencing works by reconstructing values back on the client side, the client, be it a user or service token, fetching back secrets +must be permissioned access to all base and dependent secrets. + +For example, to access some secret `A` whose values depend on secrets `B` and `C` from different scopes, a client must have `read` access to the scopes of secrets `A`, `B`, and `C`. + +### Syntax + +When defining a secret reference, interpolation syntax is used to define references to secrets in other environments and [folders](./folder). + +Suppose you have some secret `MY_SECRET` at the root of some environment and want to reference part of its value from another base secret `BASE_SECRET` located elsewhere. +Then consider the following scenarios: + +- If `BASE_SECRET` is in the same environment and folder as `MY_SECRET`, then you'd reference it using `${BASE_SECRET}`. +- If `BASE_SECRET` is at the root of another environment with the slug `dev`, then you'd reference it using `${dev.MY_SECRET}`. + +Here are a few more helpful examples for how to reference secrets in different contexts: | Reference syntax | Environment | Folder | Secret Key | | --------------------- | ----------- | ------------ | ---------- | @@ -25,29 +41,29 @@ Here are a few more examples to help you understand how to reference secrets in | `${dev.KEY2}` | `dev` | `/` (root of dev environment) | KEY2 | | `${prod.frontend.KEY2}` | `prod` | `/frontend` | KEY2 | -## Fetching fully constructed values +## Secret Imports -Secret referencing combines multiple secrets into one unified value, reconstructed only on the client side. To retrieve this value, you need access to read the environment and [folder](./folder) from where the secrets originate. -For instance, to access a secret 'A' composed of secrets 'B' and 'C' from different environments, you must have read access to both 'A' and 'B' +Infisical's secret imports feature lets you import the items of another environment or folder into the current folder context. +This can be useful if you have common secrets that need to be available across multiple environments/folders. -When using [service tokens](./token) to fetch referenced secrets, ensure the service token has read access to all referenced environments and folders. -Without proper permissions, the final secret value may be incomplete. +To add a secret import, press the downward chevron to the right of the **Add Secret** button; then press on the **Add Import** button. -## Import entire folders/environments +![add secret import](../../images/platform/secret-references-imports/secret-import-add.png) -While secret referencing effectively minimizes duplication, there might be instances where you need to import or replicate an entire folder's secrets into another. This can be achieved using the 'Import' feature. +Once added, a secret import will show up with a green import icon on the secrets dashboard. +In the example below, you can see that the items in the path `/some-folder` are being imported into +the current folder context. -This feature allows you to link secrets from one environment/folder into another environment/folder. It proves beneficial when you have common secrets that need to be available across multiple environments/folders. +![added secret import](../../images/platform/secret-references-imports/secret-import-added.png) -To add an import, simply click on the `Add import` button and provide the environment and secret path from where the secrets should be imported. +To delete a secret import, hover over it and press the **X** button that appears on the right side. -![secret import change order](../../images/secret-import-add.png) +![delete secret import](../../images/platform/secret-references-imports/secret-import-delete.png) -The hierarchy of importing secrets is governed by a "last-one-wins" rule. This means the sequence in which you import matters - the final folder imported will override secrets from any prior folders. -Additionally, any secrets you define directly in your environment will override any secrets that are imported with the same name. +Lastly, note that the order of secret imports matters. If two secret imports contain secrets with the same name, then the secret value from the bottom-most secret import is taken — "the last one wins." -You can modify the order of folders to control overrides using the `Change Order` drag handle. +To reorder a secret import, hover over it and drag the arrows handle to the position you want. -![secret import change order](../../images/secret-import-change-order.png) +![reorder secret import](../../images/platform/secret-references-imports/secret-import-reorder.png) diff --git a/docs/images/authentication-google-redirect.png b/docs/images/authentication-google-redirect.png deleted file mode 100644 index 7c4a2bff6..000000000 Binary files a/docs/images/authentication-google-redirect.png and /dev/null differ diff --git a/docs/images/dashboard-add-folder.png b/docs/images/dashboard-add-folder.png deleted file mode 100644 index 6040dcc3f..000000000 Binary files a/docs/images/dashboard-add-folder.png and /dev/null differ diff --git a/docs/images/dashboard-folder-overview.png b/docs/images/dashboard-folder-overview.png deleted file mode 100644 index 265f732fe..000000000 Binary files a/docs/images/dashboard-folder-overview.png and /dev/null differ diff --git a/docs/images/dashboard-folders.png b/docs/images/dashboard-folders.png deleted file mode 100644 index d3e92482f..000000000 Binary files a/docs/images/dashboard-folders.png and /dev/null differ diff --git a/docs/images/dashboard-name-selected.png b/docs/images/dashboard-name-selected.png deleted file mode 100644 index 41b0c4eab..000000000 Binary files a/docs/images/dashboard-name-selected.png and /dev/null differ diff --git a/docs/images/example-secret-referencing.png b/docs/images/example-secret-referencing.png deleted file mode 100644 index 031d343af..000000000 Binary files a/docs/images/example-secret-referencing.png and /dev/null differ diff --git a/docs/images/pit-commits.png b/docs/images/pit-commits.png deleted file mode 100644 index 22599311a..000000000 Binary files a/docs/images/pit-commits.png and /dev/null differ diff --git a/docs/images/pit-snapshot.png b/docs/images/pit-snapshot.png deleted file mode 100644 index b7e913108..000000000 Binary files a/docs/images/pit-snapshot.png and /dev/null differ diff --git a/docs/images/pit-snapshots.png b/docs/images/pit-snapshots.png deleted file mode 100644 index aa1cd52d3..000000000 Binary files a/docs/images/pit-snapshots.png and /dev/null differ diff --git a/docs/images/audit-logs.png b/docs/images/platform/audit-logs/audit-logs-table.png similarity index 100% rename from docs/images/audit-logs.png rename to docs/images/platform/audit-logs/audit-logs-table.png diff --git a/docs/images/platform/folder/folders-add.png b/docs/images/platform/folder/folders-add.png new file mode 100644 index 000000000..e436c5015 Binary files /dev/null and b/docs/images/platform/folder/folders-add.png differ diff --git a/docs/images/platform/folder/folders-delete.png b/docs/images/platform/folder/folders-delete.png new file mode 100644 index 000000000..dff663be9 Binary files /dev/null and b/docs/images/platform/folder/folders-delete.png differ diff --git a/docs/images/platform/folder/folders-secrets-overview.png b/docs/images/platform/folder/folders-secrets-overview.png new file mode 100644 index 000000000..1b758ea0a Binary files /dev/null and b/docs/images/platform/folder/folders-secrets-overview.png differ diff --git a/docs/images/project-ip-whitelist-add.png b/docs/images/platform/ip-allowlisting/ip-allowlisting-modal.png similarity index 100% rename from docs/images/project-ip-whitelist-add.png rename to docs/images/platform/ip-allowlisting/ip-allowlisting-modal.png diff --git a/docs/images/project-ip-whitelist.png b/docs/images/platform/ip-allowlisting/ip-allowlisting-table.png similarity index 100% rename from docs/images/project-ip-whitelist.png rename to docs/images/platform/ip-allowlisting/ip-allowlisting-table.png diff --git a/docs/images/platform/pit-recovery/pit-recovery-commits-drawer.png b/docs/images/platform/pit-recovery/pit-recovery-commits-drawer.png new file mode 100644 index 000000000..032271f04 Binary files /dev/null and b/docs/images/platform/pit-recovery/pit-recovery-commits-drawer.png differ diff --git a/docs/images/platform/pit-recovery/pit-recovery-commits.png b/docs/images/platform/pit-recovery/pit-recovery-commits.png new file mode 100644 index 000000000..8dfc3397c Binary files /dev/null and b/docs/images/platform/pit-recovery/pit-recovery-commits.png differ diff --git a/docs/images/platform/pit-recovery/pit-recovery-rollback.png b/docs/images/platform/pit-recovery/pit-recovery-rollback.png new file mode 100644 index 000000000..5bee95103 Binary files /dev/null and b/docs/images/platform/pit-recovery/pit-recovery-rollback.png differ diff --git a/docs/images/platform/project/project-secrets-add.png b/docs/images/platform/project/project-secrets-add.png new file mode 100644 index 000000000..b208818d2 Binary files /dev/null and b/docs/images/platform/project/project-secrets-add.png differ diff --git a/docs/images/platform/project/project-secrets-comment.png b/docs/images/platform/project/project-secrets-comment.png new file mode 100644 index 000000000..f669e5e12 Binary files /dev/null and b/docs/images/platform/project/project-secrets-comment.png differ diff --git a/docs/images/platform/project/project-secrets-delete-batch.png b/docs/images/platform/project/project-secrets-delete-batch.png new file mode 100644 index 000000000..be0e02361 Binary files /dev/null and b/docs/images/platform/project/project-secrets-delete-batch.png differ diff --git a/docs/images/platform/project/project-secrets-delete.png b/docs/images/platform/project/project-secrets-delete.png new file mode 100644 index 000000000..6a5bca0cd Binary files /dev/null and b/docs/images/platform/project/project-secrets-delete.png differ diff --git a/docs/images/platform/project/project-secrets-download-env.png b/docs/images/platform/project/project-secrets-download-env.png new file mode 100644 index 000000000..aba2669d3 Binary files /dev/null and b/docs/images/platform/project/project-secrets-download-env.png differ diff --git a/docs/images/platform/project/project-secrets-drawer.png b/docs/images/platform/project/project-secrets-drawer.png new file mode 100644 index 000000000..1901b1dc7 Binary files /dev/null and b/docs/images/platform/project/project-secrets-drawer.png differ diff --git a/docs/images/platform/project/project-secrets-drop-env.png b/docs/images/platform/project/project-secrets-drop-env.png new file mode 100644 index 000000000..410d5b9d7 Binary files /dev/null and b/docs/images/platform/project/project-secrets-drop-env.png differ diff --git a/docs/images/platform/project/project-secrets-ellipses.png b/docs/images/platform/project/project-secrets-ellipses.png new file mode 100644 index 000000000..2bd34db89 Binary files /dev/null and b/docs/images/platform/project/project-secrets-ellipses.png differ diff --git a/docs/images/platform/project/project-secrets-filter.png b/docs/images/platform/project/project-secrets-filter.png new file mode 100644 index 000000000..3a9444e77 Binary files /dev/null and b/docs/images/platform/project/project-secrets-filter.png differ diff --git a/docs/images/platform/project/project-secrets-override.png b/docs/images/platform/project/project-secrets-override.png new file mode 100644 index 000000000..bf2a0d590 Binary files /dev/null and b/docs/images/platform/project/project-secrets-override.png differ diff --git a/docs/images/platform/project/project-secrets-search.png b/docs/images/platform/project/project-secrets-search.png new file mode 100644 index 000000000..50650e1f9 Binary files /dev/null and b/docs/images/platform/project/project-secrets-search.png differ diff --git a/docs/images/platform/project/project-secrets-tag.png b/docs/images/platform/project/project-secrets-tag.png new file mode 100644 index 000000000..3fc618731 Binary files /dev/null and b/docs/images/platform/project/project-secrets-tag.png differ diff --git a/docs/images/platform/project/project-secrets-unhide.png b/docs/images/platform/project/project-secrets-unhide.png new file mode 100644 index 000000000..55356d878 Binary files /dev/null and b/docs/images/platform/project/project-secrets-unhide.png differ diff --git a/docs/images/platform/secret-references-imports/secret-import-add.png b/docs/images/platform/secret-references-imports/secret-import-add.png new file mode 100644 index 000000000..0b4f4225c Binary files /dev/null and b/docs/images/platform/secret-references-imports/secret-import-add.png differ diff --git a/docs/images/platform/secret-references-imports/secret-import-added.png b/docs/images/platform/secret-references-imports/secret-import-added.png new file mode 100644 index 000000000..f69f56966 Binary files /dev/null and b/docs/images/platform/secret-references-imports/secret-import-added.png differ diff --git a/docs/images/platform/secret-references-imports/secret-import-delete.png b/docs/images/platform/secret-references-imports/secret-import-delete.png new file mode 100644 index 000000000..3e6edb2fb Binary files /dev/null and b/docs/images/platform/secret-references-imports/secret-import-delete.png differ diff --git a/docs/images/platform/secret-references-imports/secret-import-reorder.png b/docs/images/platform/secret-references-imports/secret-import-reorder.png new file mode 100644 index 000000000..f55bc55e4 Binary files /dev/null and b/docs/images/platform/secret-references-imports/secret-import-reorder.png differ diff --git a/docs/images/platform/secret-references-imports/secret-reference.png b/docs/images/platform/secret-references-imports/secret-reference.png new file mode 100644 index 000000000..aee1cd92e Binary files /dev/null and b/docs/images/platform/secret-references-imports/secret-reference.png differ diff --git a/docs/images/project-download.png b/docs/images/project-download.png deleted file mode 100644 index 00b02d9bf..000000000 Binary files a/docs/images/project-download.png and /dev/null differ diff --git a/docs/images/project-drag-drop.png b/docs/images/project-drag-drop.png deleted file mode 100644 index 7ae0ed718..000000000 Binary files a/docs/images/project-drag-drop.png and /dev/null differ diff --git a/docs/images/project-envar-override.png b/docs/images/project-envar-override.png deleted file mode 100644 index d9e01c8fd..000000000 Binary files a/docs/images/project-envar-override.png and /dev/null differ diff --git a/docs/images/project-envar-toggle-moved.png b/docs/images/project-envar-toggle-moved.png deleted file mode 100644 index 2c1517b9c..000000000 Binary files a/docs/images/project-envar-toggle-moved.png and /dev/null differ diff --git a/docs/images/project-envar-toggle.png b/docs/images/project-envar-toggle.png deleted file mode 100644 index b8ffa322a..000000000 Binary files a/docs/images/project-envar-toggle.png and /dev/null differ diff --git a/docs/images/project-environment.png b/docs/images/project-environment.png deleted file mode 100644 index e2e0d2959..000000000 Binary files a/docs/images/project-environment.png and /dev/null differ diff --git a/docs/images/project-folder-token.png b/docs/images/project-folder-token.png deleted file mode 100644 index 2402acdf2..000000000 Binary files a/docs/images/project-folder-token.png and /dev/null differ diff --git a/docs/images/project-hide.png b/docs/images/project-hide.png deleted file mode 100644 index 61aed0bee..000000000 Binary files a/docs/images/project-hide.png and /dev/null differ diff --git a/docs/images/project-integrations.png b/docs/images/project-integrations.png deleted file mode 100644 index 7c2c35bd4..000000000 Binary files a/docs/images/project-integrations.png and /dev/null differ diff --git a/docs/images/project-search-typed.png b/docs/images/project-search-typed.png deleted file mode 100644 index 09513ba4c..000000000 Binary files a/docs/images/project-search-typed.png and /dev/null differ diff --git a/docs/images/project-search.png b/docs/images/project-search.png deleted file mode 100644 index bafc0b2c3..000000000 Binary files a/docs/images/project-search.png and /dev/null differ diff --git a/docs/images/project_settings_page.png b/docs/images/project_settings_page.png deleted file mode 100644 index 6f1347f52..000000000 Binary files a/docs/images/project_settings_page.png and /dev/null differ diff --git a/docs/images/secret-import-add.png b/docs/images/secret-import-add.png deleted file mode 100644 index 67445dd16..000000000 Binary files a/docs/images/secret-import-add.png and /dev/null differ diff --git a/docs/images/secret-import-change-order.png b/docs/images/secret-import-change-order.png deleted file mode 100644 index 0fba240d1..000000000 Binary files a/docs/images/secret-import-change-order.png and /dev/null differ diff --git a/docs/images/secret-versioning.png b/docs/images/secret-versioning.png deleted file mode 100644 index 96dbfde41..000000000 Binary files a/docs/images/secret-versioning.png and /dev/null differ diff --git a/docs/mint.json b/docs/mint.json index a83692fae..f03d86933 100644 --- a/docs/mint.json +++ b/docs/mint.json @@ -117,10 +117,8 @@ "documentation/platform/secret-reference", "documentation/platform/webhooks", "documentation/platform/pit-recovery", - "documentation/platform/secret-versioning", "documentation/platform/audit-logs", "documentation/platform/token", - "documentation/platform/ip-allowlisting", "documentation/platform/mfa", { "group": "SSO", diff --git a/docs/self-hosting/authentication/google.mdx b/docs/self-hosting/authentication/google.mdx deleted file mode 100644 index dc3de4089..000000000 --- a/docs/self-hosting/authentication/google.mdx +++ /dev/null @@ -1,18 +0,0 @@ ---- -title: "Google" -description: "Learn to configure Google signin/signup when self-hosting Infisical." ---- -To enable Google Auth for your Infisical project, you first need to set up a Google OAuth application. -Follow Google's Setting up OAuth 2.0 documentation [here](https://support.google.com/googleapi/answer/6158849). After the setup, copy the Client ID and Client secret. You will need them below. - -## Configure Redirect URI -Add the following URI to the Authorized redirect URIs section in the OAuth Client credentials page - `BASE_URL/api/v1/auth/callback/google`. Replace BASE_URL with the URL of your hosted Infisical instance. -![google redirect](../../images/authentication-google-redirect.png) - -## General Configuration -You wil need to configure the following [environment variables](https://infisical.com/docs/self-hosting/configuration/envars): - -- `CLIENT_ID_GOOGLE`: OAuth 2.0 Client ID obtained from the credentials page -- `CLIENT_SECRET_GOOGLE`: OAuth 2.0 Client Secret obtained from the credentials page -- `JWT_PROVIDER_AUTH_SECRET`: Secret Key for signing OAuth 2.0 access token -- `JWT_PROVIDER_AUTH_LIFETIME`: Lifetime for OAuth 2.0 access token \ No newline at end of file diff --git a/frontend/src/layouts/AppLayout/AppLayout.tsx b/frontend/src/layouts/AppLayout/AppLayout.tsx index 8dd5f12ab..50dae373b 100644 --- a/frontend/src/layouts/AppLayout/AppLayout.tsx +++ b/frontend/src/layouts/AppLayout/AppLayout.tsx @@ -489,7 +489,7 @@ export const AppLayout = ({ children }: LayoutProps) => { )} - + {/* { IP Allowlist - + */}