gsadmin
3015138484
Ran the script against a live Infisical instance for the first time. It failed
at four separate points, each fixed here.
Responses are read through Get-ApiProperty/Get-ApiCollection/Get-ApiObject
rather than directly. Set-StrictMode makes an absent property terminating, and
the cert-manager routes return bare payloads - a naked array for a list, the
resource itself for a create - where the secrets and pki routes wrap theirs in
a named property. All eighteen reads now handle either shape. The
application-to-profile listing is a join row carrying profileId, not a profile
object with an id, so it is read accordingly.
Renamed the local $configuration inside the CA loop to $caConfiguration.
PowerShell variable names are case-insensitive, so from the second CA onward it
shadowed the script-level $Configuration block and every lookup into it failed.
Renamed the $profile loop variables for the same reason: $profile is an
automatic variable.
Policies now carry subject, sans, and signature algorithms, and profiles carry
defaults. The previous comment claimed omitting subject and sans left them
unconstrained; the opposite is true. Infisical refuses any attribute with no
policy entry ("no subject policies defined"), refuses a policy that defines no
signature algorithm, and refuses a request missing a usage the policy marks
required - Request-InfisicalCertificate sends none of its own, so the profile
default has to supply it. The enumeration list in the header dropped
domain_component, upn, and any_purpose, which the API does not accept.
Verified end to end: a clean run builds both CA hierarchies including the
subordinate CSR-sign-import sequence, and a re-run creates nothing.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
95 lines
3.9 KiB
PowerShell
95 lines
3.9 KiB
PowerShell
@{
|
|
RootModule = 'PSInfisicalAPI.psm1'
|
|
ModuleVersion = '2026.08.01.0140'
|
|
GUID = 'b8a2f3d4-7c51-4d2f-9e6a-1f0c8b3d4e51'
|
|
Author = 'Grace Solutions'
|
|
CompanyName = 'Grace Solutions'
|
|
Copyright = '(c) Grace Solutions. All rights reserved.'
|
|
Description = 'PSInfisicalAPI is a C# binary PowerShell module for the Infisical REST API, providing cmdlets for authentication, secret retrieval, and export with automatic environment-variable discovery across Process, User, and Machine scopes.'
|
|
PowerShellVersion = '5.1'
|
|
CompatiblePSEditions = @('Desktop','Core')
|
|
FunctionsToExport = @()
|
|
CmdletsToExport = @(
|
|
'Connect-Infisical',
|
|
'Disconnect-Infisical',
|
|
'Get-InfisicalSecret',
|
|
'New-InfisicalSecret',
|
|
'Update-InfisicalSecret',
|
|
'Remove-InfisicalSecret',
|
|
'Copy-InfisicalSecret',
|
|
'ConvertTo-InfisicalSecretDictionary',
|
|
'Export-InfisicalSecrets',
|
|
'Import-InfisicalSecret',
|
|
'Get-InfisicalProject',
|
|
'New-InfisicalProject',
|
|
'Update-InfisicalProject',
|
|
'Remove-InfisicalProject',
|
|
'Get-InfisicalEnvironment',
|
|
'New-InfisicalEnvironment',
|
|
'Update-InfisicalEnvironment',
|
|
'Remove-InfisicalEnvironment',
|
|
'Get-InfisicalFolder',
|
|
'New-InfisicalFolder',
|
|
'Update-InfisicalFolder',
|
|
'Remove-InfisicalFolder',
|
|
'Get-InfisicalTag',
|
|
'New-InfisicalTag',
|
|
'Update-InfisicalTag',
|
|
'Remove-InfisicalTag',
|
|
'Get-InfisicalOrganization',
|
|
'New-InfisicalOrganization',
|
|
'Update-InfisicalOrganization',
|
|
'Remove-InfisicalOrganization',
|
|
'Get-InfisicalSubOrganization',
|
|
'New-InfisicalSubOrganization',
|
|
'Update-InfisicalSubOrganization',
|
|
'Remove-InfisicalSubOrganization',
|
|
'Get-InfisicalCertificateAuthority',
|
|
'Get-InfisicalPkiSubscriber',
|
|
'Get-InfisicalCertificateProfile',
|
|
'Get-InfisicalCertificatePolicy',
|
|
'Get-InfisicalCertificate',
|
|
'Request-InfisicalCertificate',
|
|
'ConvertTo-InfisicalCertificate',
|
|
'Install-InfisicalCertificate',
|
|
'Uninstall-InfisicalCertificate',
|
|
'Export-InfisicalCertificate',
|
|
'Get-InfisicalCertificateApplication',
|
|
'Get-InfisicalCertificateApplicationEnrollment',
|
|
'New-InfisicalScepDynamicChallenge',
|
|
'Get-InfisicalScepMdmProfile',
|
|
'Export-InfisicalScepMdmProfile',
|
|
'Write-InfisicalScepMdmProfileToWmi',
|
|
'Start-InfisicalProcess',
|
|
'Get-InfisicalEnvironmentVariable',
|
|
'Get-InfisicalSANList',
|
|
'New-InfisicalCertificateAuthority',
|
|
'Set-InfisicalCertificateAuthority',
|
|
'Remove-InfisicalCertificateAuthority',
|
|
'New-InfisicalCertificatePolicy',
|
|
'Set-InfisicalCertificatePolicy',
|
|
'Remove-InfisicalCertificatePolicy',
|
|
'New-InfisicalCertificateProfile',
|
|
'Set-InfisicalCertificateProfile',
|
|
'Remove-InfisicalCertificateProfile',
|
|
'New-InfisicalCertificateApplication',
|
|
'Set-InfisicalCertificateApplication',
|
|
'Remove-InfisicalCertificateApplication',
|
|
'New-InfisicalPkiSubscriber',
|
|
'Set-InfisicalPkiSubscriber',
|
|
'Remove-InfisicalPkiSubscriber'
|
|
)
|
|
AliasesToExport = @()
|
|
VariablesToExport = @()
|
|
FormatsToProcess = @('PSInfisicalAPI.Format.ps1xml')
|
|
TypesToProcess = @('PSInfisicalAPI.Types.ps1xml')
|
|
PrivateData = @{
|
|
PSData = @{
|
|
Tags = @('Infisical','Secrets','API','SecureString','Vault','Authentication')
|
|
LicenseUri = 'https://www.gnu.org/licenses/agpl-3.0.html'
|
|
ProjectUri = 'https://prod.git.gracesolution.info/gsadmin/PSInfisicalAPI'
|
|
ReleaseNotes = 'See CHANGELOG.md in the project repository for release history.'
|
|
CommitHash = '74d22a941c33'
|
|
}
|
|
}
|
|
} |