awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-08 18:28:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

update to include secret rotations

Browse Source
This commit is contained in:
ArshBallagan
2025-08-05 15:06:25 -07:00
parent e1e553ce23
commit 81cdfb9861
13 changed files with 13 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/documentation/platform/secret-rotation/aws-iam-user-secret.mdx
+1
View File
@@ -9,6 +9,7 @@ at a specified interval or on-demand.
## Prerequisites ## Prerequisites
- Create an [AWS Connection](/integrations/app-connections/aws) with the required **Secret Rotation** permissions - Create an [AWS Connection](/integrations/app-connections/aws) with the required **Secret Rotation** permissions
- AWS should be able to accept requests from Infisical
- Make sure to add the following permissions to your IAM Role/IAM User Permission policy set used by your AWS Connection: - Make sure to add the following permissions to your IAM Role/IAM User Permission policy set used by your AWS Connection:
```json ```json
docs/documentation/platform/secret-rotation/azure-client-secret.mdx
+1
View File
@@ -6,6 +6,7 @@ description: "Learn how to automatically rotate Azure Client Secrets."
## Prerequisites ## Prerequisites
- Create an [Azure Client Secret Connection](/integrations/app-connections/azure-client-secrets). - Create an [Azure Client Secret Connection](/integrations/app-connections/azure-client-secrets).
- Azure should be able to accept requests from Infisical
## Create an Azure Client Secret Rotation in Infisical ## Create an Azure Client Secret Rotation in Infisical
docs/documentation/platform/secret-rotation/ldap-password.mdx
+1
View File
@@ -14,6 +14,7 @@ description: "Learn how to automatically rotate LDAP passwords."
## Prerequisites ## Prerequisites
- Create an [LDAP Connection](/integrations/app-connections/ldap) with the **Secret Rotation** requirements - Create an [LDAP Connection](/integrations/app-connections/ldap) with the **Secret Rotation** requirements
- The LDAP provider should be able to accept requests from Infisical
## Create an LDAP Password Rotation in Infisical ## Create an LDAP Password Rotation in Infisical
docs/documentation/platform/secret-rotation/mssql-credentials.mdx
+1
View File
@@ -25,6 +25,7 @@ An example creation statement might look like:
GRANT SELECT, INSERT, UPDATE, DELETE ON SCHEMA::dbo TO [infisical_user_1]; GRANT SELECT, INSERT, UPDATE, DELETE ON SCHEMA::dbo TO [infisical_user_1];
GRANT SELECT, INSERT, UPDATE, DELETE ON SCHEMA::dbo TO [infisical_user_2]; GRANT SELECT, INSERT, UPDATE, DELETE ON SCHEMA::dbo TO [infisical_user_2];
``` ```
3. Microsoft SQL Server should be able to accept requests from Infisical
<Tip> <Tip>
To learn more about Microsoft SQL Server's permission system, please visit their [documentation](https://learn.microsoft.com/en-us/sql/t-sql/statements/grant-transact-sql?view=sql-server-ver16). To learn more about Microsoft SQL Server's permission system, please visit their [documentation](https://learn.microsoft.com/en-us/sql/t-sql/statements/grant-transact-sql?view=sql-server-ver16).
docs/documentation/platform/secret-rotation/mysql-credentials.mdx
+1 -1
View File
@@ -25,7 +25,7 @@ description: "Learn how to automatically rotate MySQL credentials."
<Tip> <Tip>
To learn more about the MySQL permission system, please visit their [documentation](https://dev.mysql.com/doc/refman/8.4/en/grant.html). To learn more about the MySQL permission system, please visit their [documentation](https://dev.mysql.com/doc/refman/8.4/en/grant.html).
</Tip> </Tip>
3. MySQL should be able to accept requests from Infisical
## Create a MySQL Credentials Rotation in Infisical ## Create a MySQL Credentials Rotation in Infisical
docs/documentation/platform/secret-rotation/okta-client-secret.mdx
+1
View File
@@ -6,6 +6,7 @@ description: "Learn how to automatically rotate Okta Client Secrets."
## Prerequisites ## Prerequisites
- Create an [Okta Connection](/integrations/app-connections/okta). - Create an [Okta Connection](/integrations/app-connections/okta).
- Okta should be able to accept requests from Infisical.
## Create an Okta Client Secret Rotation in Infisical ## Create an Okta Client Secret Rotation in Infisical
docs/documentation/platform/secret-rotation/oracledb-credentials.mdx
+1 -1
View File
@@ -26,7 +26,7 @@ description: "Learn how to automatically rotate Oracle Database credentials."
<Note> <Note>
Username must either be ALL UPPERCASE or not be surrounded by "quotes". Values not surrounded by quotes get automatically transformed to uppercase by Oracle Database. Username must either be ALL UPPERCASE or not be surrounded by "quotes". Values not surrounded by quotes get automatically transformed to uppercase by Oracle Database.
</Note> </Note>
3. OracleDB should be able to accept requests from Infisical
<Tip> <Tip>
To learn more about the Oracle Database permission system, please visit their [documentation](https://docs.oracle.com/en/database/oracle/oracle-database/19/dbseg/configuring-privilege-and-role-authorization.html). To learn more about the Oracle Database permission system, please visit their [documentation](https://docs.oracle.com/en/database/oracle/oracle-database/19/dbseg/configuring-privilege-and-role-authorization.html).
</Tip> </Tip>
docs/documentation/platform/secret-rotation/postgres-credentials.mdx
+1 -1
View File
@@ -22,7 +22,7 @@ description: "Learn how to automatically rotate PostgreSQL credentials."
GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA public TO infisical_user_1; GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA public TO infisical_user_1;
GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA public TO infisical_user_2; GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA public TO infisical_user_2;
``` ```
3. PostgreSQL should be able to accept requests from Infisical
<Tip> <Tip>
To learn more about PostgreSQL's permission system, please visit their [documentation](https://www.postgresql.org/docs/current/sql-grant.html). To learn more about PostgreSQL's permission system, please visit their [documentation](https://www.postgresql.org/docs/current/sql-grant.html).
</Tip> </Tip>
docs/integrations/secret-syncs/aws-secrets-manager.mdx
+1 -1
View File
@@ -7,7 +7,7 @@ description: "Learn how to configure an AWS Secrets Manager Sync for Infisical."
- Set up and add secrets to [Infisical Cloud](https://app.infisical.com) - Set up and add secrets to [Infisical Cloud](https://app.infisical.com)
- Create an [AWS Connection](/integrations/app-connections/aws) with the required **Secret Sync** permissions - Create an [AWS Connection](/integrations/app-connections/aws) with the required **Secret Sync** permissions
- AWS should be able to accept requests from Infisical - AWS Secrets Manager should be able to accept requests from Infisical
<Tabs> <Tabs>
<Tab title="Infisical UI"> <Tab title="Infisical UI">
docs/integrations/secret-syncs/azure-devops.mdx
+1 -1
View File
@@ -7,7 +7,7 @@ description: "Learn how to configure a Azure DevOps Sync for Infisical."
- Set up and add secrets to [Infisical Cloud](https://app.infisical.com) - Set up and add secrets to [Infisical Cloud](https://app.infisical.com)
- Create an [Azure DevOps Connection](/integrations/app-connections/azure-devops) - Create an [Azure DevOps Connection](/integrations/app-connections/azure-devops)
- Azure should be able to accept requests from Infisical - Azure DevOps should be able to accept requests from Infisical
<Tabs> <Tabs>
<Tab title="Infisical UI"> <Tab title="Infisical UI">
docs/integrations/secret-syncs/azure-key-vault.mdx
+1 -1
View File
@@ -7,7 +7,7 @@ description: "Learn how to configure a Azure Key Vault Sync for Infisical."
- Set up and add secrets to [Infisical Cloud](https://app.infisical.com) - Set up and add secrets to [Infisical Cloud](https://app.infisical.com)
- Create an [Azure Key Vault Connection](/integrations/app-connections/azure-key-vault) - Create an [Azure Key Vault Connection](/integrations/app-connections/azure-key-vault)
- Azure should be able to accept requests from Infisical - Azure Key Vault should be able to accept requests from Infisical
<Note> <Note>
The Azure Key Vault Secret Sync requires the following secrets permissions to be set on the user / service principal The Azure Key Vault Secret Sync requires the following secrets permissions to be set on the user / service principal
docs/integrations/secret-syncs/gcp-secret-manager.mdx
+1 -1
View File
@@ -11,7 +11,7 @@ description: "Learn how to configure a GCP Secret Manager Sync for Infisical."
![Secret Syncs Tab](/images/secret-syncs/gcp-secret-manager/enable-resource-manager-api.png) ![Secret Syncs Tab](/images/secret-syncs/gcp-secret-manager/enable-resource-manager-api.png)
![Secret Syncs Tab](/images/secret-syncs/gcp-secret-manager/enable-secret-manager-api.png) ![Secret Syncs Tab](/images/secret-syncs/gcp-secret-manager/enable-secret-manager-api.png)
![Secret Syncs Tab](/images/secret-syncs/gcp-secret-manager/enable-service-usage-api.png) ![Secret Syncs Tab](/images/secret-syncs/gcp-secret-manager/enable-service-usage-api.png)
- GCP should be able to accept requests from Infisical - GCP Secret Manager should be able to accept requests from Infisical
<Tabs> <Tabs>
<Tab title="Infisical UI"> <Tab title="Infisical UI">
docs/integrations/secret-syncs/oci-vault.mdx
+1 -1
View File
@@ -14,7 +14,7 @@ description: "Learn how to configure an Oracle Cloud Infrastructure Vault Sync f
- Create an [OCI Connection](/integrations/app-connections/oci) with the required **Secret Sync** permissions - Create an [OCI Connection](/integrations/app-connections/oci) with the required **Secret Sync** permissions
- [Create](https://docs.oracle.com/en-us/iaas/Content/Identity/compartments/To_create_a_compartment.htm) or use an existing OCI Compartment (which the OCI Connection is authorized to access) - [Create](https://docs.oracle.com/en-us/iaas/Content/Identity/compartments/To_create_a_compartment.htm) or use an existing OCI Compartment (which the OCI Connection is authorized to access)
- [Create](https://docs.oracle.com/en-us/iaas/Content/KeyManagement/Tasks/managingvaults_topic-To_create_a_new_vault.htm#createnewvault) or use an existing OCI Vault - [Create](https://docs.oracle.com/en-us/iaas/Content/KeyManagement/Tasks/managingvaults_topic-To_create_a_new_vault.htm#createnewvault) or use an existing OCI Vault
- OCI should be able to accept requests from Infisical - OCI Vault should be able to accept requests from Infisical
<Tabs> <Tabs>
<Tab title="Infisical UI"> <Tab title="Infisical UI">