Skip to main content
Ryvn integrates with Infisical to sync secrets directly into your variable groups. This lets you manage secrets in Infisical and have them automatically available in your installations.

​
Prerequisites

  • An Infisical account with a project containing secrets
  • Organization admin access in Ryvn

​
Setting Up the Connection

1

Go to Machine Identities

In Infisical, navigate to Organization Settings > Access Control > Machine Identities.
Organization settings showing Machine Identities tab
2

Create a Machine Identity

Click Create Organization Machine Identity. Give it a name (e.g. ryvn-secret-sync) and set the role to Member.
Create machine identity dialog
3

Configure Universal Auth

On the machine identity page, Universal Auth is configured by default under Authentication.
Machine identity page showing Universal Auth
4

Add to Project

Click Add to Project to grant the machine identity access to the Infisical project containing your secrets. Set the role to Developer or higher.
Add machine identity to project dialog
5

Create a Client Secret

Under Universal Auth, click Create Client Secret. Give it a description (e.g. ryvn-creds). Copy the Client ID and Client Secret — you’ll need both.
Create client secret dialog
6

Add Connection in Ryvn

In Ryvn, go to Settings > Connections > Infisical and click Add Connection. Paste the Client ID and Client Secret, give the connection a name, and click Create Connection.
Add Infisical connection dialog in Ryvn

​
Using the Connection

Once connected, you can link Infisical secrets to your variable groups. When creating or editing a variable group, select the Infisical connection and choose which project, environment, and secret path to sync from. Secrets are synced automatically on a regular interval. You can also test the connection from the Infisical settings page to verify it’s working.

​
Managing Connections

From Settings > Connections > Infisical, you can:
  • Test a connection to verify credentials are valid
  • Edit a connection to update the API URL or rotate credentials
  • Delete a connection (any linked variable groups will stop syncing)
Deleting a connection will stop all variable groups linked to it from syncing. Make sure to update or unlink those groups first.