docs(infisical): document al provider auth methods by varonix0 · Pull Request #5929 · external-secrets/external-secrets

varonix0 · 2026-02-05T13:30:22Z

Problem Statement

Missing documentation for newer Infisical auth methods

Related Issue

Fixes #...

Proposed Changes

Added documentation for all supported Infisical auth methods.

Checklist

I have read the contribution guidelines
All commits are signed with git commit --signoff
My changes have reasonable test coverage
All tests pass with make test
I ensured my PR is ready for review with make reviewable

Summary

Comprehensive documentation update for the Infisical provider, replacing a single authentication narrative with a complete multi-method authentication matrix.

Key Changes:

Introduced a structured authentication methods table covering 10 auth approaches: Universal Auth, Kubernetes Auth, AWS Auth, Azure Auth, GCP ID Token Auth, GCP IAM Auth, JWT Auth, LDAP Auth, OCI Auth, and Token Auth
Added dedicated sections for each authentication method with prerequisites, secret storage examples, and SecretStore configuration YAML
Replaced generic references with concrete code examples for identity and credential mappings
Added new sections for Custom CA Certificates (supporting both caBundle and caProvider approaches) and Secrets Scope Configuration with field documentation
Reorganized document structure with improved section dividers and consistent heading hierarchy
Enhanced code clarity in "Fetching Secrets" section and updated all YAML examples to reflect new standards

Impact:

Resolves missing documentation for newer Infisical auth methods
Provides users with clear, method-specific guidance for configuring each authentication approach

Signed-off-by: Daniel Hougaard <daniel@infisical.com>

coderabbitai · 2026-02-05T13:30:44Z

Walkthrough

Enhanced Infisical provider documentation with Machine Identity-based authentication support. Restructured authentication section to include multiple methods (Universal Auth, Kubernetes, AWS, Azure, GCP, JWT, LDAP, OCI, Token Auth) with dedicated prerequisites and YAML configuration examples. Added Custom CA Certificates and Secrets Scope Configuration sections.

Changes

Cohort / File(s)	Summary
Authentication Framework & Methods `docs/provider/infisical.md`	Introduced Machine Identity-based authentication with multi-method matrix. Reworked Prerequisites section to use stepwise approach. Added comprehensive Universal Auth section with Kubernetes SecretStore examples. Created dedicated sections for each authentication method (Kubernetes, AWS, Azure, GCP ID Token, GCP IAM, JWT, LDAP, OCI, Token Auth) with prerequisites, secret storage examples, and concrete YAML configurations.
Configuration & TLS Support `docs/provider/infisical.md`	Added new Custom CA Certificates section with two approaches: inline caBundle and caProvider (Secret/ConfigMap reference). Introduced Secrets Scope Configuration section documenting fields like projectSlug, environmentSlug, secretsPath, recursive, and expandSecretReferences with recommended defaults.
Documentation Structure & Examples `docs/provider/infisical.md`	Expanded Fetching Secrets section with clarified wording for project context. Replaced generic SecretStore references with concrete YAML examples mapping identityId and credentials. Inserted section dividers and consistent headings. Updated code blocks and Note/Tip callouts for consistency across the document.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

varonix0 · 2026-02-05T14:08:31Z

@Skarlso, looks like I don't have access to rename the pull request to resolve the test. Can you kindly rename the PR for me so the test passes?

varonix0 · 2026-02-05T20:39:01Z

Thank you @Skarlso! Could I kindly request your review? This should just be a smaller doc change :-)

Skarlso · 2026-02-05T20:40:40Z

Will get to it tomorrow. :)

sonarqubecloud · 2026-02-06T12:29:24Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

…2 (#3782) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [external-secrets/external-secrets](https://github.com/external-secrets/external-secrets) | major | `v1.3.2` → `v2.0.0` | --- ### Release Notes <details> <summary>external-secrets/external-secrets (external-secrets/external-secrets)</summary> ### [`v2.0.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.0.0) [Compare Source](external-secrets/external-secrets@v1.3.2...v2.0.0) ### BREAKING CHANGE Please note that this release removed two of the unsupported and unmaintained providers Alibaba and Device42. Image: `ghcr.io/external-secrets/external-secrets:v2.0.0` Image: `ghcr.io/external-secrets/external-secrets:v2.0.0-ubi` Image: `ghcr.io/external-secrets/external-secrets:v2.0.0-ubi-boringssl`  #### What's Changed ##### General - chore: bump charts to 1.3.2 by [@gusfcarvalho](https://github.com/gusfcarvalho) in [#5923](external-secrets/external-secrets#5923) - feat(charts): add hostAliases support by [@janlauber](https://github.com/janlauber) in [#5866](external-secrets/external-secrets#5866) - chore: remove unmaintained secret stores by [@Skarlso](https://github.com/Skarlso) in [#5918](external-secrets/external-secrets#5918) - docs(infisical): document al provider auth methods by [@varonix0](https://github.com/varonix0) in [#5929](external-secrets/external-secrets#5929) - chore: Get validating webhook failurePolicy for Secretstore dynamically by [@LochanRn](https://github.com/LochanRn) in [#5605](external-secrets/external-secrets#5605) #### New Contributors - [@LochanRn](https://github.com/LochanRn) made their first contribution in [#5605](external-secrets/external-secrets#5605) **Full Changelog**: <external-secrets/external-secrets@v1.3.2...v2.0.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/3782 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [external-secrets](https://github.com/external-secrets/external-secrets) | major | `1.3.2` → `2.0.0` | --- ### Release Notes <details> <summary>external-secrets/external-secrets (external-secrets)</summary> ### [`v2.0.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.0.0) [Compare Source](external-secrets/external-secrets@v1.3.2...v2.0.0) ### BREAKING CHANGE Please note that this release removed two of the unsupported and unmaintained providers Alibaba and Device42. Image: `ghcr.io/external-secrets/external-secrets:v2.0.0` Image: `ghcr.io/external-secrets/external-secrets:v2.0.0-ubi` Image: `ghcr.io/external-secrets/external-secrets:v2.0.0-ubi-boringssl`  #### What's Changed ##### General - chore: bump charts to 1.3.2 by [@gusfcarvalho](https://github.com/gusfcarvalho) in [#5923](external-secrets/external-secrets#5923) - feat(charts): add hostAliases support by [@janlauber](https://github.com/janlauber) in [#5866](external-secrets/external-secrets#5866) - chore: remove unmaintained secret stores by [@Skarlso](https://github.com/Skarlso) in [#5918](external-secrets/external-secrets#5918) - docs(infisical): document al provider auth methods by [@varonix0](https://github.com/varonix0) in [#5929](external-secrets/external-secrets#5929) - chore: Get validating webhook failurePolicy for Secretstore dynamically by [@LochanRn](https://github.com/LochanRn) in [#5605](external-secrets/external-secrets#5605) #### New Contributors - [@LochanRn](https://github.com/LochanRn) made their first contribution in [#5605](external-secrets/external-secrets#5605) **Full Changelog**: <external-secrets/external-secrets@v1.3.2...v2.0.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/3788 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

…al-secrets#5929) Signed-off-by: Daniel Hougaard <daniel@infisical.com> Co-authored-by: Gergely Bräutigam <skarlso777@gmail.com> Signed-off-by: Nattapong Ekudomsuk <nuttapong_mos@hotmail.com>

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [external-secrets](https://github.com/external-secrets/external-secrets) | major | `1.3.2` → `2.0.0` | --- ### Release Notes <details> <summary>external-secrets/external-secrets (external-secrets)</summary> ### [`v2.0.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.0.0) [Compare Source](external-secrets/external-secrets@v1.3.2...v2.0.0) ### BREAKING CHANGE Please note that this release removed two of the unsupported and unmaintained providers Alibaba and Device42. Image: `ghcr.io/external-secrets/external-secrets:v2.0.0` Image: `ghcr.io/external-secrets/external-secrets:v2.0.0-ubi` Image: `ghcr.io/external-secrets/external-secrets:v2.0.0-ubi-boringssl`  #### What's Changed ##### General - chore: bump charts to 1.3.2 by [@gusfcarvalho](https://github.com/gusfcarvalho) in [#5923](external-secrets/external-secrets#5923) - feat(charts): add hostAliases support by [@janlauber](https://github.com/janlauber) in [#5866](external-secrets/external-secrets#5866) - chore: remove unmaintained secret stores by [@Skarlso](https://github.com/Skarlso) in [#5918](external-secrets/external-secrets#5918) - docs(infisical): document al provider auth methods by [@varonix0](https://github.com/varonix0) in [#5929](external-secrets/external-secrets#5929) - chore: Get validating webhook failurePolicy for Secretstore dynamically by [@LochanRn](https://github.com/LochanRn) in [#5605](external-secrets/external-secrets#5605) #### New Contributors - [@LochanRn](https://github.com/LochanRn) made their first contribution in [#5605](external-secrets/external-secrets#5605) **Full Changelog**: <external-secrets/external-secrets@v1.3.2...v2.0.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Reviewed-on: https://kubara.git.onstackit.cloud/STACKIT/kubara/pulls/283

…al-secrets#5929) Signed-off-by: Daniel Hougaard <daniel@infisical.com> Co-authored-by: Gergely Bräutigam <skarlso777@gmail.com>

github-project-automation bot added this to External Secrets Feb 5, 2026

github-actions bot added kind/documentation Categorizes issue or PR as related to documentation. size/l labels Feb 5, 2026

docs(infisical): document all infisical provider auth methods

45fcf72

Signed-off-by: Daniel Hougaard <daniel@infisical.com>

varonix0 force-pushed the infisical/eso-docs branch from bb1fcbf to 45fcf72 Compare February 5, 2026 13:30

varonix0 marked this pull request as draft February 5, 2026 14:29

varonix0 marked this pull request as ready for review February 5, 2026 14:30

Skarlso changed the title ~~docs(provider/infisical): document al provider auth methods~~ docs(infisical): document al provider auth methods Feb 5, 2026

github-actions bot added the area/infisical Issues / Pull Requests related to infisical provider label Feb 5, 2026

Skarlso approved these changes Feb 6, 2026

View reviewed changes

Merge branch 'main' into infisical/eso-docs

b8aa6d5

Skarlso merged commit 5a66ba8 into external-secrets:main Feb 6, 2026
29 checks passed

github-project-automation bot moved this to Done in External Secrets Feb 6, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

docs(infisical): document al provider auth methods#5929

docs(infisical): document al provider auth methods#5929
Skarlso merged 2 commits intoexternal-secrets:mainfrom
varonix0:infisical/eso-docs

varonix0 commented Feb 5, 2026 •

edited by coderabbitai bot

Loading

Uh oh!

coderabbitai bot commented Feb 5, 2026 •

edited

Loading

Uh oh!

varonix0 commented Feb 5, 2026

Uh oh!

varonix0 commented Feb 5, 2026

Uh oh!

Skarlso commented Feb 5, 2026

Uh oh!

sonarqubecloud bot commented Feb 6, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

varonix0 commented Feb 5, 2026 • edited by coderabbitai bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Problem Statement

Related Issue

Proposed Changes

Checklist

Summary

Key Changes:

Impact:

Uh oh!

coderabbitai bot commented Feb 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Uh oh!

varonix0 commented Feb 5, 2026

Uh oh!

varonix0 commented Feb 5, 2026

Uh oh!

Skarlso commented Feb 5, 2026

Uh oh!

sonarqubecloud bot commented Feb 6, 2026

Quality Gate passed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

varonix0 commented Feb 5, 2026 •

edited by coderabbitai bot

Loading

coderabbitai bot commented Feb 5, 2026 •

edited

Loading