AB Initio

How to use Infisical secrets in AB Initio.

Prerequisites

• Set up and add envars to Infisical.
• Install the Infisical CLI to your server.

Setup

1. Authorize Infisical for AB Initio

   Create a machine identity in Infisical and give it the appropriate read permissions for the desired project and secret paths.

2. Add Infisical CLI to your workflow

   Update your AB Initio workflows to use Infisical CLI to inject Infisical secrets as environment variables.

   # Login using the machine identity. Modify this accordingly based on the authentication method used.
   export INFISICAL_TOKEN=$(infisical login --method=universal-auth --client-id=$INFISICAL_CLIENT_ID --client-secret=$INFISICAL_CLIENT_SECRET --silent --plain)
   
   # Fetch secrets from Infisical
   infisical export --projectId="<>" --env="prod" > infisical.env
   
   # Inject secrets as environment variables
   source infisical.env