Skip to content

Add Infisical KMS provider#88

Open
victorvhs017 wants to merge 2 commits intolibopenstorage:masterfrom
victorvhs017:infisical-kms-integration
Open

Add Infisical KMS provider#88
victorvhs017 wants to merge 2 commits intolibopenstorage:masterfrom
victorvhs017:infisical-kms-integration

Conversation

@victorvhs017
Copy link
Copy Markdown

@victorvhs017 victorvhs017 commented Apr 13, 2026

Summary

  • Add infisical-kms secrets backend that delegates encryption/decryption to Infisical KMS
  • Follows the same pattern as existing KMS integrations (gcloud, ibm, aws)
  • Uses Universal Auth (client-id + client-secret) with automatic token refresh
  • Ciphertext persisted via KVDB-backed PersistenceStore
  • Uses Infisical API directly instead of the Infisical Go SDK to avoid adding new dependencies

Victor Hugo dos Santos added 2 commits April 13, 2026 19:08
…nfisical_kms_integration_test.go`, and `infisical_kms_test.go` files.

- Add support for Infisical in the secrets management system, including methods for putting, getting, and deleting secrets.
- Implement integration tests for full lifecycle operations with Infisical KMS.
…dependency changes, implement `infisical/client.go` for KMS client functionality, and modify tests in `infisical_kms_test.go` to align with new client structure.
@varonix0
Copy link
Copy Markdown

Hi @Adityadan, can we please get a review on this PR? It should be good to go with no new dependencies!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants