infisicli

infisicli

Infisicli, a simple Infisical CLI.

Features

• List organizations, workspaces, environments, and secrets.
• Create/Update/Delete folders.
• Create/Update/Delete secrets.
• Create/Update/Delete organizations, workspaces, and environments.

Install

$ go install github.com/meinside/infisical-go/cmd/infisicli@latest

Configuration

Put a config.json file in $XDG_CONFIG_HOME/infisicli/ directory with following content:

{
  // Infisical API Key
  "api_key": "ak.1234567890.abcdefghijk",

  // Infisical Universal Auth id & secret
  "client_id": "abcd-efgh-ijkl-mnop",
  "client_secret": "0123456789abcdefghijklmnop",
}

where api_key is the API key of your Infisical account,

client_id is the universal-auth client id,

and client_secret is the universal-auth client secret.

NOTE: You can omit the api_key value:

{
  // Infisical Universal Auth id & secret
  "client_id": "abcd-efgh-ijkl-mnop",
  "client_secret": "0123456789abcdefghijklmnop",
}

but in this case some features that require api_key (eg. listing organizations, listing workspaces, …) will not function.

Usage

You can see detailed help messages with:

$ infisicli -h
# or
$ infisicli --help

With the valid configuration, you can do following tasks:

List Organizations

List organizations info with:

$ infisicli -lo

           id | name
----
<your-org-id> | your-org-name

List Workspaces

List workspaces with obtained from above:

$ infisicli -lw -o=<your-org-id>

       org id |    workspace id | workspace name
----
<your-org-id> | <workspace1-id> | workspace1-name
      dev | Development (workspace1-dev-env-id)
  staging |     Staging (workspace1-staging-env-id)
     prod |  Production (workspace1-prod-env-id)
----
<your-org-id> | <workspace2-id> | workspace2-name
      dev | Development (workspace2-dev-env-id)
  staging |     Staging (workspace2-staging-env-id)
     prod |  Production (workspace2-prod-env-id)
...

can be omitted, then it will iterate all organizations and list all workspaces in them.

List Secrets

Now list all secrets in a folder:

$ infisicli -las -w=<workspace1-id> -e=dev -f=/folder1/folder2

      workspace | env |    type | path/key=value
----
<workspace1-id> | dev | <type1> | /folder1/folder2/<key1>=<value1>
<workspace1-id> | dev | <type2> | /folder1/folder2/<key2>=<value2>
...

Folder can be omitted, then it will iterate all folders and list all secrets in them.

Print a Secret Value

Following will print the value of given key-path (folder + key) without a trailing newline:

$ infisicli -p -w=<workspace1-id> -e=dev -t=<type1> -k=/folder1/folder2/<key1>

<value1>

It can also be used in shell scripts like:

VALUE=$(infisicli -p -w=<workspace1-id> -e=dev -t=<type1> -k=/folder1/folder2/<key1>)

echo "value for key: <key1> = $VALUE"

Create/Update/Delete a Secret

Create a new secret:

$ infisicli -n -w=<workspace1-id> -e=dev -t=shared -k=<path/key> -s=<new-value>

> Successfully created a new secret value at: <path/key>

Update a secret value:

$ infisicli -u -w=<workspace1-id> -e=dev -t=shared -k=<path/key> -s=<updated-value>

> Successfully updated a secret value at: <path/key>

Delete a secret:

$ infisicli -d -w=<workspace1-id> -e=dev -t=shared -k=<path/key>

> Successfully deleted a secret value at: <path/key>

License

MIT