infisical-wrapper 1.0.0

Infisical SDK Python wrapper with environment validation and secret helpers

Infisical Secrets Wrapper

A clean, Pythonic wrapper around the Infisical SDK with:

• automatic environment validation
• client initialisation
• fetch secrets for a given 'project'
• single-secret lookup
• clean error handling

Purpose

• Unified way of getting secrets into python scripts in a secure mmanner
• Keep Dry. A lot of verbosity otherwise required to reliably pull secrets.
• Simplify
• catch things that go wrong.

Pre-requisites

• A self-hosted Infisical Server.
• Universal Auth Credentials for the server.
• Access to /etc/environment

Installation

pip install infisical-wrapper

Create Infisical Creds

These can be found or created in the Infisical ui at
Access Control/Machine Identities/Create or click Organization Machine Identity/Universal Auth dropdown/
Here you will find Client ID and Client Secret

INFISICAL HOST="http(s)://<host>:<port>"  
INFISICAL_CLIENT_ID= "<YOUR ID>"
INFISICAL_CLIENT_SECRET= "<YOUR SECRET>"

Put these in /etc/environmment to be accessible globally on your node.
Log out and in again.
Alternatively keep them in .env which are picked up on fallback.
These allow the module to reach your Infisical Server.

Usage

from infisical_wrapper import Infisical

mgr = Infisical()
client = mgr.init_client()

# Fetch all Secrets for a Project
secrets = mgr.fetch_secrets("my-project")
print(f"\n🔑 Secrets dictionary:\n{secrets}")

# Get a specific Secret for a Project
password = mgr.get_secret("my-project", "prod", "DB_PASSWORD")
print(password)

License

MIT License