Skip to main content
This guide provides step-by-step guidance on how to fetch secrets from Infisical using Terraform.

​
Prerequisites

  • Basic understanding of Terraform
  • Install Terraform

​
Steps

​
1. Define Required Providers

Specify infisical in the required_providers block within the terraform block of your configuration file. If you would like to use a specific version of the provider, uncomment and replace <latest version> with the version of the Infisical provider that you want to use.
main.tf
terraform {
  required_providers {
    infisical = {
      # version = <latest version>
      source = "infisical/infisical"
    }
  }
}

​
2. Configure the Infisical Provider

Set up the Infisical provider by specifying the host and service_token. Replace <> in service_token with your actual token. The host is only required if you are using a self-hosted instance of Infisical.
main.tf
provider "infisical" {
  host          = "https://app.infisical.com" # Only required if using self hosted instance of Infisical, default is https://app.infisical.com
  service_token = "<>" # Get token https://infisical.com/docs/documentation/platform/token
}
It is recommended to use Terraform variables to pass your service token dynamically to avoid hard coding it

​
3. Fetch Infisical Secrets

Use the infisical_secrets data source to fetch your secrets. In this block, you must set the env_slug and folder_path to scope the secrets you want. env_slug is the slug of the environment name. This slug name can be found under the project settings page on the Infisical dashboard. folder_path is the path to the folder in a given environment. The path / for root of the environment where as /folder1 is the folder at the root of the environment.
main.tf
data "infisical_secrets" "my-secrets" {
  env_slug    = "dev"
  folder_path = "/some-folder/another-folder"
}

​
4. Define Outputs

As an example, we are going to output your fetched secrets. Replace SECRET-NAME with the actual name of your secret. For a single secret:
main.tf
output "single-secret" {
  value = data.infisical_secrets.my-secrets.secrets["SECRET-NAME"]
}
For all secrets: 
output "all-secrets" {
  value = data.infisical_secrets.my-secrets.secrets
}

​
5. Run Terraform

Once your configuration is complete, initialize your Terraform working directory: 
$ terraform init
Then, run the plan command to view the fetched secrets: 
$ terraform plan
Terraform will now fetch your secrets from Infisical and display them as output according to your configuration.

​
Conclusion

You have now successfully set up and used the Infisical provider with Terraform to fetch secrets. For more information, visit the Infisical documentation.