API_KEY
from the dev
environment of the YOUR_PROJECT_ID
project.
auth.universal_auth()
with empty arguments to use the following environment variables:
INFISICAL_UNIVERSAL_AUTH_CLIENT_ID
- Your machine identity client ID.INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET
- Your machine identity client secret..auth.gcp_id_token_auth()
with empty arguments to use the following environment variables:
INFISICAL_GCP_AUTH_IDENTITY_ID
- Your Infisical Machine Identity ID..auth.gcp_iam_auth()
with empty arguments to use the following environment variables:
INFISICAL_GCP_IAM_AUTH_IDENTITY_ID
- Your Infisical Machine Identity ID.INFISICAL_GCP_IAM_SERVICE_ACCOUNT_KEY_FILE_PATH
- The path to your GCP service account key file..auth.aws_iam_auth()
with empty arguments to use the following environment variables:
INFISICAL_AWS_IAM_AUTH_IDENTITY_ID
- Your Infisical Machine Identity ID..auth.azure_auth()
with empty arguments to use the following environment variables:
INFISICAL_AZURE_AUTH_IDENTITY_ID
- Your Infisical Machine Identity ID..auth.kubernetes_auth()
with empty arguments to use the following environment variables:
INFISICAL_KUBERNETES_IDENTITY_ID
- Your Infisical Machine Identity ID.INFISICAL_KUBERNETES_SERVICE_ACCOUNT_TOKEN_PATH_ENV_NAME
- The environment variable name that contains the path to the service account token. This is optional and will default to /var/run/secrets/kubernetes.io/serviceaccount/token
.Secrets().Retrieve()
fetches and returns a shared secret.
key
(string): A base64-encoded, 256-bit symmetric key, that can be used for encryption/decryption purposes.
tag
(string): A base64-encoded, 128-bit authentication tag.
iv
(string): A base64-encoded, 96-bit initialization vector.
ciphertext
(string): A base64-encoded, encrypted ciphertext.
Plaintext
(string): The decrypted plaintext.