Components
Understand Infisical’s core architectural components and how they work together.
Overview
Infisical is architected around several key components that work in concert to provide a secure and streamlined secret management experience. These components span the client, API, and storage layers, ensuring that secrets are protected at every stage of their lifecycle.
1. API (Backend)
Infisical exposes a well-documented REST API that enables programmatic interaction with the platform, enabling a wide range of use cases.
2. Storage Backend
Infisical relies on a robust storage backend to durably store secrets, users, and other platform data. Infisical’s storage backend is PostgreSQL.
3. Caching Layer
Infisical uses Redis to enable more complex workflows including a queuing system to manage long-running asynchronous tasks, cron jobs, as well as reliable cache for frequently used resources.
4. Clients
Clients are interfaces through which users and applications interact with the Infisical API:
-
Web UI: A browser-based portal providing a user-friendly interface for managing secrets, configurations, and performing administrative tasks.
-
CLI: A terminal-based tool for interacting with the Infisical API, enabling automation, scripting, and integration into CI/CD pipelines.
-
SDKs (Software Development Kits): Platform-specific libraries with method abstractions for working with secrets. Supported languages include Node.js, Python, Java, Golang, Ruby and .NET.
-
Kubernetes Operator: A Kubernetes-native component that facilitates the secure retrieval and management of secrets within a Kubernetes cluster. The operator supports multiple custom resource definitions (CRDs) for syncing secrets.
-
Infisical Agent: Daemon that automatically fetches and manages access tokens and secrets to be used in various client resources.
Was this page helpful?