SDK: return all secrets (or paths) accessable by machine identity #1593
Daniel-Faber
started this conversation in
Ideas
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
When restricting the access for certain machine identities to some subset(s) of secrets, e.g. using the glob patterns, it would be really great to have the option to get all available secrets with one single call. In fact, even when a machine identity does have full access to all secrets, in order to read all secrets (worst-case 1:1), the client using the machine identity still has to "know" which secrets to read from which paths (in which environment) :/
This introduces a hard dependancy to the way the secrets are structured in infisical into the client(s). As a side-effect this dependancy also makes re-structuring of the secrets folders / paths structure really difficult.
Having the option to either a) have all secrets return a machine identity has access to or at least b) get a list of all paths per environment a machine identity has access to, so we can then loop through them in the client.
I am aware that option a) could mean that secrets with the same name would be overriden, before being returned, but this is a responsibilty of the customer properly organizing his secrets and access rights. If you go for option b) this is something the client would have to take care of, as it could at least now dynamically fetch them 1:1 itself.
Beta Was this translation helpful? Give feedback.
All reactions