awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-09-22 13:39:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'origin/main' into feat/addHerokuSecretSync

Browse Source
This commit is contained in:
carlosmonastyrski
2025-06-19 08:47:03 -03:00
parent 02f311515c f385386a4b
commit 6720217cee
205 changed files with 5151 additions and 759 deletions
Download Patch File Download Diff File Expand all files Collapse all files

96
docs/integrations/app-connections/flyio.mdx Normal file
View File

@@ -0,0 +1,96 @@
---
title: "Fly.io Connection"
description: "Learn how to configure a Fly.io Connection for Infisical."
---
Infisical supports the use of [Access Tokens](https://fly.io/docs/security/tokens/) to connect with Fly.io.
## Create Fly.io Access Token
<Steps>
<Step title="Navigate to 'Access Tokens'">
![Dashboard Page](/images/app-connections/flyio/dashboard-page.png)
</Step>
<Step title="Click 'Create Token'">
![Click Create Token](/images/app-connections/flyio/create-token.png)
</Step>
<Step title="Provide Token Information">
Ensure that you give this token access to the correct app, then click 'Create Token'.
![Create Token Page](/images/app-connections/flyio/create-token-page.png)
</Step>
<Step title="Save Token">
After clicking 'Create Token', a modal containing your access token will appear. Save this token for later steps.
</Step>
</Steps>
## Create Fly.io Connection in Infisical
<Tabs>
<Tab title="Infisical UI">
<Steps>
<Step title="Navigate to App Connections">
In your Infisical dashboard, go to **Organization Settings** and select the [**App Connections**](https://app.infisical.com/organization/app-connections) tab.
![App Connections Tab](/images/app-connections/general/add-connection.png)
</Step>
<Step title="Select Fly.io Connection">
Click the **+ Add Connection** button and select the **Fly.io Connection** option from the available integrations.
![Select Fly.io Connection](/images/app-connections/flyio/app-connection-option.png)
</Step>
<Step title="Fill out the Fly.io Connection Modal">
Complete the Fly.io Connection form by entering:
- A descriptive name for the connection
- An optional description for future reference
- The Access Token from earlier steps
![Fly.io Connection Modal](/images/app-connections/flyio/app-connection-modal.png)
</Step>
<Step title="Connection Created">
After clicking Create, your **Fly.io Connection** is established and ready to use with your Infisical projects.
![Fly.io Connection Created](/images/app-connections/flyio/app-connection-created.png)
</Step>
</Steps>
</Tab>
<Tab title="API">
To create a Fly.io Connection, make an API request to the [Create Fly.io Connection](/api-reference/endpoints/app-connections/flyio/create) API endpoint.
### Sample request
```bash Request
curl --request POST \
--url https://app.infisical.com/api/v1/app-connections/flyio \
--header 'Content-Type: application/json' \
--data '{
"name": "my-flyio-connection",
"method": "access-token",
"credentials": {
"accessToken": "[PRIVATE TOKEN]"
}
}'
```
### Sample response
```bash Response
{
"appConnection": {
"id": "e5d18aca-86f7-4026-a95e-efb8aeb0d8e6",
"name": "my-flyio-connection",
"description": null,
"version": 1,
"orgId": "6f03caa1-a5de-43ce-b127-95a145d3464c",
"createdAt": "2025-04-23T19:46:34.831Z",
"updatedAt": "2025-04-23T19:46:34.831Z",
"isPlatformManagedCredentials": false,
"credentialsHash": "7c2d371dec195f82a6a0d5b41c970a229cfcaf88e894a5b6395e2dbd0280661f",
"app": "flyio",
"method": "access-token",
"credentials": {}
}
}
```
</Tab>
</Tabs>

55
docs/integrations/app-connections/render.mdx Normal file
View File

@@ -0,0 +1,55 @@
---
title: "Render Connection"
description: "Learn how to configure a Render Connection for Infisical."
---
Infisical supports connecting to Render using API keys for secure access to your Render services.
## Configure API Key for Infisical
<Steps>
<Step title="Access Account Settings">
Navigate to your Render dashboard and click on **Account Settings** in the
top right corner. ![Account
Settings](/images/app-connections/render/render-account-settings.png)
</Step>
<Step title="Generate API Key">
In the Account Settings page, scroll down to the **API Keys** section and
click **Create API Key**. ![Create API
Key](/images/app-connections/render/render-create-api-key.png)
</Step>
<Step title="Name Your API Key">
Enter a descriptive name for your API key (e.g., "production")
and click **Create API Key**. ![Name API
Key](/images/app-connections/render/render-name-api-key.png)
</Step>
<Step title="Save Your API Key">
After creation, you'll be shown your API key. Make sure to copy and securely
store this key as it will not be shown again.
</Step>
</Steps>
## Setup Render Connection in Infisical
<Steps>
<Step title="Navigate to App Connections">
Navigate to the **App Connections** tab on the **Organization Settings**
page. ![App Connections
Tab](/images/app-connections/general/add-connection.png)
</Step>
<Step title="Add Connection">
Select the **Render Connection** option from the connection options modal.
![Select Render
Connection](/images/app-connections/render/render-app-connection-select.png)
</Step>
<Step title="Input API Key">
Enter your Render API key in the provided field and click **Connect to
Render** to establish the connection. ![Connect to
Render](/images/app-connections/render/render-app-connection-form.png)
</Step>
<Step title="Connection Created">
Your **Render Connection** is now available for use in your Infisical
projects. ![Render Connection
Created](/images/app-connections/render/render-app-connection-created.png)
</Step>
</Steps>

31
docs/integrations/cloud/render.mdx
View File

@@ -3,30 +3,7 @@ title: "Render"
description: "How to sync secrets from Infisical to Render"
---
Prerequisites:
- Set up and add envars to [Infisical Cloud](https://app.infisical.com)
<Steps>
<Step title="Authorize Infisical for Render">
Obtain a Render API Key in your Render Account Settings > API Keys.
![integrations render dashboard](../../images/integrations/render/integrations-render-dashboard.png)
![integrations render token](../../images/integrations/render/integrations-render-token.png)
Navigate to your project's integrations tab in Infisical.
![integrations](../../images/integrations.png)
Press on the Render tile and input your Render API Key to grant Infisical access to your Render account.
![integrations render authorization](../../images/integrations/render/integrations-render-auth.png)
</Step>
<Step title="Start integration">
Select which Infisical environment secrets you want to sync to which Render service and press create integration to start syncing secrets to Render.
![integrations render](../../images/integrations/render/integrations-render-create.png)
![integrations render](../../images/integrations/render/integrations-render.png)
</Step>
</Steps>
<Note>
The Render Native Integration will be deprecated in 2026. Please migrate to
our new [Render Sync](../secret-syncs/render).
</Note>

155
docs/integrations/secret-syncs/flyio.mdx Normal file
View File

@@ -0,0 +1,155 @@
---
title: "Fly.io Sync"
description: "Learn how to configure a Fly.io Sync for Infisical."
---
**Prerequisites:**
- Create a [Fly.io Connection](/integrations/app-connections/flyio)
<Tabs>
<Tab title="Infisical UI">
<Steps>
<Step title="Add Sync">
Navigate to **Project** > **Integrations** and select the **Secret Syncs** tab. Click on the **Add Sync** button.
![Secret Syncs Tab](/images/secret-syncs/general/secret-sync-tab.png)
</Step>
<Step title="Select 'Fly.io'">
![Select Fly.io](/images/secret-syncs/flyio/select-option.png)
</Step>
<Step title="Configure source">
Configure the **Source** from where secrets should be retrieved, then click **Next**.
![Configure Source](/images/secret-syncs/flyio/configure-source.png)
- **Environment**: The project environment to retrieve secrets from.
- **Secret Path**: The folder path to retrieve secrets from.
<Tip>
If you need to sync secrets from multiple folder locations, check out [secret imports](/documentation/platform/secret-reference#secret-imports).
</Tip>
</Step>
<Step title="Configure destination">
Configure the **Destination** to where secrets should be deployed, then click **Next**.
![Configure Destination](/images/secret-syncs/flyio/configure-destination.png)
- **Fly.io Connection**: The Fly.io Connection to authenticate with.
- **App**: The Fly.io app to sync secrets to.
</Step>
<Step title="Configure sync options">
Configure the **Sync Options** to specify how secrets should be synced, then click **Next**.
![Configure Sync Options](/images/secret-syncs/flyio/configure-sync-options.png)
- **Initial Sync Behavior**: Determines how Infisical should resolve the initial sync.
- **Overwrite Destination Secrets**: Removes any secrets at the destination endpoint not present in Infisical.
<Note>
Fly.io does not support importing secrets.
</Note>
- **Key Schema**: Template that determines how secret names are transformed when syncing, using `{{secretKey}}` as a placeholder for the original secret name and `{{environment}}` for the environment.
<Note>
We highly recommend using a Key Schema to ensure that Infisical only manages the specific keys you intend, keeping everything else untouched.
</Note>
- **Auto-Sync Enabled**: If enabled, secrets will automatically be synced from the source location when changes occur. Disable to enforce manual syncing only.
- **Disable Secret Deletion**: If enabled, Infisical will not remove secrets from the sync destination. Enable this option if you intend to manage some secrets manually outside of Infisical.
</Step>
<Step title="Configure details">
Configure the **Details** of your Fly.io Sync, then click **Next**.
![Configure Details](/images/secret-syncs/flyio/configure-details.png)
- **Name**: The name of your sync. Must be slug-friendly.
- **Description**: An optional description for your sync.
</Step>
<Step title="Review configuration">
Review your Fly.io Sync configuration, then click **Create Sync**.
![Review Configuration](/images/secret-syncs/flyio/review-configuration.png)
</Step>
<Step title="Sync created">
If enabled, your Fly.io Sync will begin syncing your secrets to the destination endpoint.
![Sync Created](/images/secret-syncs/flyio/sync-created.png)
</Step>
</Steps>
</Tab>
<Tab title="API">
To create a **Fly.io Sync**, make an API request to the [Create Fly.io Sync](/api-reference/endpoints/secret-syncs/flyio/create) API endpoint.
### Sample request
```bash Request
curl --request POST \
--url https://app.infisical.com/api/v1/secret-syncs/flyio \
--header 'Content-Type: application/json' \
--data '{
"name": "my-flyio-sync",
"projectId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"description": "an example sync",
"connectionId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"environment": "dev",
"secretPath": "/my-secrets",
"isEnabled": true,
"syncOptions": {
"initialSyncBehavior": "overwrite-destination"
},
"destinationConfig": {
"appId": "..."
}
}'
```
### Sample response
```bash Response
{
"secretSync": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"name": "my-flyio-sync",
"description": "an example sync",
"isEnabled": true,
"version": 1,
"folderId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"connectionId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"createdAt": "2023-11-07T05:31:56Z",
"updatedAt": "2023-11-07T05:31:56Z",
"syncStatus": "succeeded",
"lastSyncJobId": "123",
"lastSyncMessage": null,
"lastSyncedAt": "2023-11-07T05:31:56Z",
"importStatus": null,
"lastImportJobId": null,
"lastImportMessage": null,
"lastImportedAt": null,
"removeStatus": null,
"lastRemoveJobId": null,
"lastRemoveMessage": null,
"lastRemovedAt": null,
"syncOptions": {
"initialSyncBehavior": "overwrite-destination"
},
"projectId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"connection": {
"app": "flyio",
"name": "my-flyio-connection",
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
},
"environment": {
"slug": "dev",
"name": "Development",
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
},
"folder": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"path": "/my-secrets"
},
"destination": "flyio",
"destinationConfig": {
"appId": "..."
}
}
}
```
</Tab>
</Tabs>

135
docs/integrations/secret-syncs/render.mdx Normal file
View File

@@ -0,0 +1,135 @@
---
title: "Render Sync"
description: "Learn how to configure a Render Sync for Infisical."
---
**Prerequisites:**
- Set up and add secrets to [Infisical Cloud](https://app.infisical.com)
- Create a [Render Connection](/integrations/app-connections/render)
<Tabs>
<Tab title="Infisical UI">
1. Navigate to **Project** > **Integrations** and select the **Secret Syncs** tab. Click on the **Add Sync** button.
![Secret Syncs Tab](/images/secret-syncs/general/secret-sync-tab.png)
2. Select the **Render** option.
![Select Render](/images/secret-syncs/render/select-render-option.png)
3. Configure the **Source** from where secrets should be retrieved, then click **Next**.
![Configure Source](/images/secret-syncs/render/render-sync-source.png)
- **Environment**: The project environment to retrieve secrets from.
- **Secret Path**: The folder path to retrieve secrets from.
<Tip>
If you need to sync secrets from multiple folder locations, check out [secret imports](/documentation/platform/secret-reference#secret-imports).
</Tip>
4. Configure the **Destination** to where secrets should be deployed, then click **Next**.
![Configure Destination](/images/secret-syncs/render/render-sync-destination.png)
- **Render Connection**: The Render Connection to authenticate with.
- **Scope**: Select **Service**.
- **Service**: Choose the Render service you want to sync secrets to.
5. Configure the **Sync Options** to specify how secrets should be synced, then click **Next**.
![Configure Options](/images/secret-syncs/render/render-sync-options.png)
- **Initial Sync Behavior**: Determines how Infisical should resolve the initial sync.
- **Overwrite Destination Secrets**: Removes any secrets at the destination endpoint not present in Infisical.
- **Import Secrets (Prioritize Infisical)**: Imports secrets from the Render service before syncing, prioritizing values from Infisical over Render when keys conflict.
- **Import Secrets (Prioritize Render)**: Imports secrets from the Render service before syncing, prioritizing values from Render over Infisical when keys conflict.
- **Key Schema**: Template that determines how secret names are transformed when syncing, using `{{secretKey}}` as a placeholder for the original secret name and `{{environment}}` for the environment.
- **Auto-Sync Enabled**: If enabled, secrets will automatically be synced from the source location when changes occur. Disable to enforce manual syncing only.
- **Disable Secret Deletion**: If enabled, Infisical will not remove secrets from the sync destination. Enable this option if you intend to manage some secrets manually outside of Infisical.
6. Configure the **Details** of your Render Sync, then click **Next**.
![Configure Details](/images/secret-syncs/render/render-sync-details.png)
- **Name**: The name of your sync. Must be slug-friendly.
- **Description**: An optional description for your sync.
7. Review your Render Sync configuration, then click **Create Sync**.
![Confirm Configuration](/images/secret-syncs/render/render-sync-review.png)
8. If enabled, your Render Sync will begin syncing your secrets to the destination endpoint.
![Sync Secrets](/images/secret-syncs/render/render-sync-created.png)
</Tab>
<Tab title="API">
To create a **Render Sync**, make an API request to the [Create Render Sync](/api-reference/endpoints/secret-syncs/render/create) API endpoint.
### Sample request
```bash Request
curl --request POST \
--url https://app.infisical.com/api/v1/secret-syncs/render \
--header 'Content-Type: application/json' \
--data '{
"name": "my-render-sync",
"projectId": "your-project-id",
"description": "an example sync",
"connectionId": "your-render-connection-id",
"environment": "production",
"secretPath": "/my-secrets",
"isEnabled": true,
"syncOptions": {
"initialSyncBehavior": "overwrite-destination"
},
"destinationConfig": {
"scope": "service",
"serviceId": "your-render-service-id",
"type": "env"
}
}'
```
### Sample response
```bash Response
{
"secretSync": {
"id": "your-sync-id",
"name": "my-render-sync",
"description": "an example sync",
"isEnabled": true,
"version": 1,
"folderId": "your-folder-id",
"connectionId": "your-render-connection-id",
"createdAt": "2024-05-01T12:00:00Z",
"updatedAt": "2024-05-01T12:00:00Z",
"syncStatus": "succeeded",
"lastSyncJobId": "123",
"lastSyncMessage": null,
"lastSyncedAt": "2024-05-01T12:00:00Z",
"syncOptions": {
"initialSyncBehavior": "overwrite-destination"
},
"projectId": "your-project-id",
"connection": {
"app": "render",
"name": "my-render-connection",
"id": "your-render-connection-id"
},
"environment": {
"slug": "production",
"name": "Production",
"id": "your-env-id"
},
"folder": {
"id": "your-folder-id",
"path": "/my-secrets"
},
"destination": "render",
"destinationConfig": {
"scope": "service",
"serviceId": "your-render-service-id",
"type": "env"
}
}
}
```
</Tab>
</Tabs>