Skip to main content

​
Description

Dynamic secrets are unique secrets generated on demand based on the provided configuration settings. For more details, refer to dynamics secrets section. This command enables you to perform list, lease, renew lease, and revoke lease operations on dynamic secrets within your Infisical project.

​
Sub-commands

Use this command to print out all of the dynamic secrets in your project.

​
Environment variables

Used to fetch dynamic secrets via a machine identity instead of logged-in credentials. Simply, export this variable in the terminal before running this command.
Used to disable the check for new CLI versions. This can improve the time it takes to run this command. Recommended for production environments.To use, simply export this variable in the terminal before running this command.

​
Flags

The project ID to fetch dynamic secrets from.
The project slug to fetch dynamic secrets from.
The authenticated token to fetch dynamic secrets from. This is required when using a machine identity to authenticate.
Used to select the environment name on which actions should be taken. Default value: dev
Use to select the project folder on which dynamic secrets will be accessed.
This command is used to create a new lease for a dynamic secret.

​
Flags

Used to select the environment name on which actions should be taken. Default value: dev
The --plain flag will output dynamic secret lease credentials values without formatting, one per line. Default value: false
The --path flag indicates which project folder dynamic secrets will be injected from.
The project ID of the dynamic secrets to lease from.
The project slug of the dynamic secrets to lease from.
The authenticated token to create dynamic secret leases. This is required when using a machine identity to authenticate.
The lease lifetime. If not provided, the default TTL of the dynamic secret root credential will be used.

​
Provider-specific flags

The following flags are specific to certain providers or integrations:
The namespace to create the lease in. Only used for Kubernetes dynamic secrets.
Comma-separated list of principals for the SSH certificate. Only used for SSH dynamic secrets. The requested principals must be in the allowed list configured on the dynamic secret.
This command is used to list leases for a dynamic secret.

​
Flags

Used to select the environment name on which actions should be taken. Default value: dev
The --path flag indicates which project folder dynamic secrets will be injected from.
The project ID of the dynamic secrets to list leases from.
The project slug of the dynamic secrets to list leases from.
The authenticated token to list dynamic secret leases. This is required when using a machine identity to authenticate.
This command is used to renew a lease before it expires.

​
Flags

Used to select the environment name on which actions should be taken. Default value: dev
The --path flag indicates which project folder dynamic secrets will be renewed from.
The project ID of the dynamic secret to lease from.
The project slug of the dynamic secret to lease from.
The authenticated token to create dynamic secret leases. This is required when using a machine identity to authenticate.
The lease lifetime. If not provided, the default TTL of the dynamic secret root credential will be used.
This command is used to delete a lease.

​
Flags

Used to select the environment name on which actions should be taken. Default value: dev
The --path flag indicates which project folder dynamic secrets will be deleted from.
The project ID of the dynamic secret to delete lease from.
The project slug of the dynamic secret to delete lease from.
The authenticated token to delete dynamic secret leases. This is required when using a machine identity to authenticate.