> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.
# infisical dynamic-secrets
> Perform dynamic secret operations directly with the CLI
```
infisical dynamic-secrets
```
## Description
Dynamic secrets are unique secrets generated on demand based on the provided configuration settings. For more details, refer to [dynamics secrets section](/documentation/platform/dynamic-secrets/overview).
This command enables you to perform list, lease, renew lease, and revoke lease operations on dynamic secrets within your Infisical project.
### Sub-commands
Use this command to print out all of the dynamic secrets in your project.
```bash theme={"dark"}
$ infisical dynamic-secrets
```
### Environment variables
Used to fetch dynamic secrets via a [machine identity](/documentation/platform/identities/machine-identities) instead of logged-in credentials. Simply, export this variable in the terminal before running this command.
```bash theme={"dark"}
# Example
export INFISICAL_TOKEN=$(infisical login --method=universal-auth --client-id= --client-secret= --silent --plain) # --plain flag will output only the token, so it can be fed to an environment variable. --silent will disable any update messages.
```
Used to disable the check for new CLI versions. This can improve the time it takes to run this command. Recommended for production environments.
To use, simply export this variable in the terminal before running this command.
```bash theme={"dark"}
# Example
export INFISICAL_DISABLE_UPDATE_CHECK=true
```
### Flags
The project ID to fetch dynamic secrets from.
```bash theme={"dark"}
# Example
infisical dynamic-secrets --projectId=
```
The project slug to fetch dynamic secrets from.
```bash theme={"dark"}
# Example
infisical dynamic-secrets --project-slug=
```
The authenticated token to fetch dynamic secrets from. This is required when using a machine identity to authenticate.
```bash theme={"dark"}
# Example
infisical dynamic-secrets --token=
```
Used to select the environment name on which actions should be taken. Default
value: `dev`
Use to select the project folder on which dynamic secrets will be accessed.
```bash theme={"dark"}
# Example
infisical dynamic-secrets --path="/" --env=dev
```
This command is used to create a new lease for a dynamic secret.
```bash theme={"dark"}
$ infisical dynamic-secrets lease create
```
### Flags
Used to select the environment name on which actions should be taken. Default
value: `dev`
The `--plain` flag will output dynamic secret lease credentials values without formatting, one per line.
Default value: `false`
```bash theme={"dark"}
# Example
infisical dynamic-secrets lease create dynamic-secret-postgres --plain
```
The `--path` flag indicates which project folder dynamic secrets will be injected from.
```bash theme={"dark"}
# Example
infisical dynamic-secrets lease create --path="/" --env=dev
```
The project ID of the dynamic secrets to lease from.
```bash theme={"dark"}
# Example
infisical dynamic-secrets lease create --projectId=
```
The project slug of the dynamic secrets to lease from.
```bash theme={"dark"}
# Example
infisical dynamic-secrets lease create --project-slug=
```
The authenticated token to create dynamic secret leases. This is required when using a machine identity to authenticate.
```bash theme={"dark"}
# Example
infisical dynamic-secrets lease create --token=
```
The lease lifetime. If not provided, the default TTL of the dynamic secret root credential will be used.
```bash theme={"dark"}
# Example
infisical dynamic-secrets lease create --ttl=
```
### Provider-specific flags
The following flags are specific to certain providers or integrations:
The namespace to create the lease in. Only used for Kubernetes dynamic secrets.
```bash theme={"dark"}
# Example
infisical dynamic-secrets lease create --kubernetes-namespace=
```
Comma-separated list of principals for the SSH certificate. Only used for SSH dynamic secrets. The requested principals must be in the allowed list configured on the dynamic secret.
```bash theme={"dark"}
# Example
infisical dynamic-secrets lease create --principals=root,deploy
```
This command is used to list leases for a dynamic secret.
```bash theme={"dark"}
$ infisical dynamic-secrets lease list
```
### Flags
Used to select the environment name on which actions should be taken. Default
value: `dev`
The `--path` flag indicates which project folder dynamic secrets will be injected from.
```bash theme={"dark"}
# Example
infisical dynamic-secrets lease list --path="/" --env=dev
```
The project ID of the dynamic secrets to list leases from.
```bash theme={"dark"}
# Example
infisical dynamic-secrets lease list --projectId=
```
The project slug of the dynamic secrets to list leases from.
```bash theme={"dark"}
# Example
infisical dynamic-secrets lease list --project-slug=
```
The authenticated token to list dynamic secret leases. This is required when using a machine identity to authenticate.
```bash theme={"dark"}
# Example
infisical dynamic-secrets lease list --token=
```
This command is used to renew a lease before it expires.
```bash theme={"dark"}
$ infisical dynamic-secrets lease renew
```
### Flags
Used to select the environment name on which actions should be taken. Default
value: `dev`
The `--path` flag indicates which project folder dynamic secrets will be renewed from.
```bash theme={"dark"}
# Example
infisical dynamic-secrets lease renew --path="/" --env=dev
```
The project ID of the dynamic secret to lease from.
```bash theme={"dark"}
# Example
infisical dynamic-secrets lease renew --projectId=
```
The project slug of the dynamic secret to lease from.
```bash theme={"dark"}
# Example
infisical dynamic-secrets lease renew --project-slug=
```
The authenticated token to create dynamic secret leases. This is required when using a machine identity to authenticate.
```bash theme={"dark"}
# Example
infisical dynamic-secrets lease renew --token=
```
The lease lifetime. If not provided, the default TTL of the dynamic secret root credential will be used.
```bash theme={"dark"}
# Example
infisical dynamic-secrets lease renew --ttl=
```
This command is used to delete a lease.
```bash theme={"dark"}
$ infisical dynamic-secrets lease delete
```
### Flags
Used to select the environment name on which actions should be taken. Default
value: `dev`
The `--path` flag indicates which project folder dynamic secrets will be deleted from.
```bash theme={"dark"}
# Example
infisical dynamic-secrets lease delete --path="/" --env=dev
```
The project ID of the dynamic secret to delete lease from.
```bash theme={"dark"}
# Example
infisical dynamic-secrets lease delete --projectId=
```
The project slug of the dynamic secret to delete lease from.
```bash theme={"dark"}
# Example
infisical dynamic-secrets lease delete --project-slug=
```
The authenticated token to delete dynamic secret leases. This is required when using a machine identity to authenticate.
```bash theme={"dark"}
# Example
infisical dynamic-secrets lease delete --token=
```