1. Docs
  2. Pulumi ESC
  3. Integrations
  4. Dynamic login credentials
  5. infisical-login

infisical-login

    The infisical-login provider enables you to log in to Infisical using OpenID Connect or by providing static credentials. The provider will return a set of credentials that can be used to run Infisical CLI commands using the esc run command and also pull in secrets from Infisical using the infisical-secrets provider.

    Example

    values:
      infisical:
        login:
          fn::open::infisical-login:
            oidc:
              identityId: aaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee
    

    Configuring OIDC

    To learn how to configure OpenID Connect (OIDC) between Pulumi Cloud and Infisical, see the OpenID Connect integration documentation.

    Inputs

    PropertyTypeDescription
    siteUrlstring[Optional] - The base URL of the Infisical instance you want to connect to. May be omitted if default US instance is used.
    oidcInfisicalLoginOIDC[Optional] - OIDC configuration to log in to Infisical.
    staticInfisicalLoginStatic[Optional] - A static set of credentials to use to log in to Infisical.

    InfisicalLoginOIDC

    PropertyTypeDescription
    identityIdstringThe identityId of the Identity to assume.
    subjectAttributesstring[][Optional] - Subject attributes to be included in the OIDC token. For more information see the OpenID subject customization documentation

    InfisicalLoginStatic

    On your Infisical Identity, add a new Auth method and select Universal Auth. Create a new Client secret and copy both the clientID and clientSecret from Universal Auth.

    PropertyTypeDescription
    clientIdstringThe Universal Auth client id.
    clientSecretstringThe Universal Auth client secret.

    Outputs

    PropertyTypeDescription
    siteUrlstring[Optional] - The base URL of the Infisical instance you authenticated to. May be omitted if default US instance was used.
    accessTokenstringThe access token to use for authentication.
      PulumiUP May 6, 2025. Register Now.