@here I'd appreciate help as this is a blocker

Hello Infisical team. I hope you are well. I need help deleting one project-managed machine identity in EU Cloud. Delete protection is disabled. However, both documented deletion endpoints return HTTP 500. Revoking its OIDC method and deleting its project membership also return HTTP 500. This identity uses our final free-plan machine identity slot. The error prevents us from replacing it with a correctly scoped identity in another project. We do not want to upgrade our plan only to work around this deletion error. Could you please inspect or remove the affected identity record? I can provide the organization, project, identity IDs, request times, and other details in a private message. Thank you for your help.

Hey Infisical team! We're setting up TLS Certificate Auth for a machine identity on your EU cloud and we think we've hit an infra issue on your side. The login endpoint on eu.infisical.com port 8443 never asks for a client certificate during the TLS handshake, so every login attempt comes back as a 400 saying Missing TLS certificate in header. We double checked with openssl s_client on both TLS 1.2 and 1.3 and the server never sends a CertificateRequest. The exact same request with the same certificate against app.infisical.com on the same port works fine and gets as far as the identity lookup, so the same setup behaves differently between US and EU. Our guess is that the mTLS pass through is missing on the EU load balancer listener. If it helps, here are two request ids from failed EU attempts: req-GDy6GpZuu5sxAI and req-vYWE9ugHHFGR04. Happy to share more details or rerun tests once you've had a look. Thanks a lot!

Hi, Infisicial team! I set up the organisation using the US origin rather than EU origin. Is there a way to migrate to the the EU origin without deleting and setting up everythign from scratch?

Hello, In the context of developping webapps for internal company purpose, I am looking to move away from .env files I just discovered infisical, and am wondering how app credentials that are passed from the app to infisical to allow retrieving the secrets are stored? Or did I just miss an important detail in the introductions? Regards,

And I also have a question regarding PAM management. How does infisical access the resources to change the credentials? There must be some kind of entry point, how is this not long lived? What happens in case of disaster to the Infisical database/host? (I agree this is more 3 questions than one 😛 )

Hi Inifisical Team! I'm trying to add Vercel integration but when I click on "Connect to Vercel" after filling out the fields, it gives me this error:

Failed to validate credentials: {"error":{"code":"not_found","message":"User not found."}}.

Request ID: req-d9eMMb0M5HO1xq

Update: Resolved the issue with a service account. Seems like Infisical requires the address of the Vercel token to match with an address in the Infisical org.

Hi Inifisical Team! We are going to try Infisical self hosted version on our Kubernetes cluster. We were wondering if we could use Github auth to authenticate our users via SSO with the self hosted version, and up to how many users ?

Hello, i have filled out the contact form twice now asking for sales to contact me, havent heard back. Maybe it is broken? is this a better avenue to get the attention of your sales team? :P

Hi Infisical Team! We have requested an expansion for the plan of our organisation to add a suborganisation. We have requested this expansion but have not heard back. Could you bring me in contact with someone who can help us forward?

Hello team! Im on a free plan. I deleted the 2 machine identities to re-create them, but when I do I get this error (see attached) even tho the UI doesn't show any existing machine identities. Any quick fix?

Alright figured it out was just looking at one project but not the others!

I'm trying to edit existing Secret syncs, but there doesn't seem to be an option for this? Do I just need to delete and re-create them?

I have been trying to invite users for hours now i am not getting any email , i keep getting this every time { "status": "error", "code": 502, "message": "Application failed to respond", "request_id": "mmB07hHPRp-io-qvlt7tkg" } @Matheus Nogueira @Infisical @Vlad (Infisical) @Daniel Hougaard @Max (Infisical)

Unable to sign in, never got given recovery codes and they are lost, account sign in link not working so account is bricked... link to org but org cannot fix it

hi! im on what i guess is the legacy secret plan but i dont know how to upgrade to use dynamic secrets, dont see the option

Hello Infisical Team, I've been reaching out to your support team (support@infisical.com) regarding invoice issues and i haven't gotten any replies nor acknowledgement. So i'm trying this route instead. Anyone can assist or redirect me to the correct contact please and thank you?

I already have a infsical EU account, and accidently created an US account. Could someone delete the US one?

Hello, it appears that when an Infisical folder synced to all Vercel environments is updated, the shared environment variables linked to the Vercel project disappear. Expected behavior: Updating the Infisical folder should not remove or affect existing shared environment variables linked to the Vercel project. Actual behavior: After the Infisical folder is updated/synced, the shared variables appear to be removed from the Vercel project. Any guidance or feedback would be appreciated, thank you.

Hey there, infisical peeps. We run a self hosted instance and something has recently happened where the invitations we send are no longer successfully onboarding new devs. This wasn't the case for a long time, and recently, something happened where they click through the activation link, and it says the invitation is no longer valid. Known issue? something worth filing?

Hello infisical folks, why can't i upgrade a secret value on the pro plan?

I have a stale policy which is impacting my secret fetching

I get this error: /Users/dev/collect-server-health.sh zsh: unknown username ' o' Fetching Infisical access token... Traceback (most recent call last): File "<stdin>", line 6, in <module> File "/Library/Developer/CommandLineTools/Library/Frameworks/Python3.framework/Versions/3.9/lib/python3.9/pathlib.py", line 1257, in read_text return f.read() File "/Library/Developer/CommandLineTools/Library/Frameworks/Python3.framework/Versions/3.9/lib/python3.9/codecs.py", line 322, in decode (result, consumed) = self._buffer_decode(data, self.errors, final) UnicodeDecodeError: 'utf-8' codec can't decode byte 0xe5 in position 1: invalid continuation byte Installed legacy SSH key at /Users/dev/.ssh/[key name] SSH config: user=joshfialkoff identity=/Users/dev/.ssh/[key name] Fetching secrets from Infisical... Warning: Your logged-in session is being overwritten by the token provided from the --token flag. Request: GET secrets.assistedly.ai/api/v4/…/secrets?includeImports=true&amp;projectId=…&amp;… I Request ID: req-R4XhcRAoPBiMbr Response Code: 403 Forbidden Message: The provided access token is malformed. Please use a valid token or generate a new one and try again. Context: • Unable to fetch secrets If this issue continues, get support at infisical.com/slack

Hello! I'm trying to change my email address, but I'm running into an issue: my old email is inaccessible because the domain expired. Since I can't receive the confirmation email, is there a way to bypass this step or verify my identity another way?

Hi! I have self-hosted Infisical. Tried to make another user server admin and got a instruction to upgrade to Infisical Pro. Any way to transfer admin rights to another user? For example in case of one admin is leaving the company and we need to make other user full admin?

Hi Team, I have a quick question for infisical secret manager setup with railway. Does it just add keys to railway or inject the keys during boot time and the keys are never seen by railway?

I am on Pro plan but im unable to add custom access, could you please help me out?

Hi, after rolling my Railway token, I’m not able to sync secrets to Railway anymore. I’ve tried every Railway token type combination, and nothing has worked. The error message I get back doesn’t tell me much either.

Hey team! I'm facing a situation and would love help on this. I'm syncing certificates to AWS Secrets Manager with "preserve secret on renewal" enabled. After a renewal, a new secret named after the new certificate ID was created, and the existing secret wasn't updated. Per the docs, the name schema must include the certificate ID ("Certificate Name Schema: ... Must include {{certificateId}}"), and "Preserve Secret on Renewal" should "update the existing secret on renewal instead of creating a new one". Since each renewal issues a new certificate ID, I rely on the preserve option to keep the same secret. What should I check so renewals update the existing secret instead? https://infisical.com/docs/documentation/platform/pki/applications/certificate-syncs/aws-secrets-manager

Hi, could someone please message me regarding my recent bill. I have emailed but mo reply as of yet.