Any plans for Infisical (secrets manager) as a credential source?

[vtmocanu]

Thanks for this, really cool project.

I'm using Infisical for secrets management across my stack and was wondering if there are any plans to wire agent-vault up to it directly, so agent-vault could pull credentials from an Infisical project/env instead of having them set manually via vault credential set or through proposals.

Rough idea: point a vault at an Infisical instance + machine identity, and have agent-vault sync credentials from there (read-only) so they stay the single source of truth and rotations propagate automatically.

Is this on the roadmap, or is the design intent to keep agent-vault's store fully self-contained?

[dangtony98]

Hey @vtmocanu!

Glad you brought this up. Yes we do intend to add support for Infisical as a secrets backend for Agent Vault (AV); this will unlock a whole lot more value for folks using both together since you get all the secrets versioning, automation, etc. features that already exist in Infisical. I would expect this integration to come out sometime end of next week or the week after since there are some user management / access control implications to think about when integrating the two.

Go give you more insight into how we're thinking thinking about AV: The idea is that folks should be able to use AV independently of a secrets manager but it would be a no-brainer to integrate it with one when running a more complete, fuller deployment. We'll be adding first-class support for Infisical first to provide the best possible credential management experience for agents :)

[vtmocanu]

Thanks for taking the time to get back to me @dangtony98 !
Glad to hear it, will take it for a spin once it lands.

[askpatrickw]

I'm replacing OneCLI with AgentVault, but using a single credential store is a must-have.
Looking forward to the new feature!