AB Initio - Infisical

Prerequisites

Set up and add envars to Infisical.
Install the Infisical CLI to your server.

Setup

<Steps> <Step title="Authorize Infisical for AB Initio"> Create a [machine identity](https://infisical.com/docs/documentation/platform/identities/machine-identities#machine-identities) in Infisical and give it the appropriate read permissions for the desired project and secret paths. </Step> <Step title="Add Infisical CLI to your workflow"> Update your AB Initio workflows to use Infisical CLI to inject Infisical secrets as environment variables.

    ```bash
    # Login using the machine identity. Modify this accordingly based on the authentication method used.
    export INFISICAL_TOKEN=$(infisical login --method=universal-auth --client-id=$INFISICAL_CLIENT_ID --client-secret=$INFISICAL_CLIENT_SECRET --silent --plain)

    # Fetch secrets from Infisical
    infisical export --projectId="<>" --env="prod" > infisical.env

    # Inject secrets as environment variables
    source infisical.env
    ```
</Step>

</Steps>