Backstage Infisical Plugin

Integrate secrets management into your developer portal with the Backstage Infisical plugin suite. This plugin provides a seamless interface to manage your Infisical secrets directly within Backstage, including full support for environments and folder structure.

Features

Secrets Management: View, create, update, and delete secrets from Infisical
Folder Navigation: Explore the full folder structure of your Infisical projects
Multi-Environment Support: Easily switch between and manage different environments
Entity Linking: Map Backstage entities to specific Infisical projects via annotations

Installation

Frontend Plugin

# From your Backstage root directory
yarn --cwd packages/app add @infisical/backstage-plugin-infisical

Backend Plugin

# From your Backstage root directory
yarn --cwd packages/backend add @infisical/backstage-backend-plugin-infisical

Configuration

Backend

Update your app-config.yaml:

infisical:
  baseUrl: https://app.infisical.com

  authentication:
    # Option 1: API Token Authentication
    auth_token:
      token: ${INFISICAL_API_TOKEN}

    # Option 2: Client Credentials Authentication
    universalAuth:
      clientId: ${INFISICAL_CLIENT_ID}
      clientSecret: ${INFISICAL_CLIENT_SECRET}

If you have not created a machine identity yet, you can do so in Identities

import { createBackend } from '@backstage/backend-defaults';

const backend = createBackend();

backend.add(import('@infisical/backstage-backend-plugin-infisical'));

backend.start();

Frontend

Update packages/app/src/App.tsx to include the plugin:

import { infisicalPlugin } from '@infisical/backstage-plugin-infisical';

const app = createApp({
  plugins: [
    infisicalPlugin,
    // ...other plugins
  ],
});

Modify packages/app/src/components/catalog/EntityPage.tsx:

import { EntityInfisicalContent } from '@infisical/backstage-plugin-infisical';

const serviceEntityPage = (
  <EntityLayout>
    {/* ...other tabs */}
    <EntityLayout.Route path="/infisical" title="Secrets">
      <EntityInfisicalContent />
    </EntityLayout.Route>
  </EntityLayout>
);

Entity Annotation

Add the Infisical project ID to your entity yaml settings:

apiVersion: backstage.io/v1alpha1
kind: Component
metadata:
  name: example-service
  annotations:
    infisical/projectId: <your-infisical-project-id>

Replace <your-infisical-project-id> with the actual project ID from Infisical.

Usage

Once installed and configured, you can:

View and manage secrets in Infisical from within Backstage
Create, update, and delete secrets using the Infisical tab in entity pages
Navigate environments and folders
Search and filter secrets by key, value, or comments

Secrets Management

Product Reference

Infrastructure Integrations

Secret Syncs

CI/CD Integrations

Framework Integrations

Build Tool Integrations

Others

Backstage Infisical Plugin

Features

Installation

Frontend Plugin

Backend Plugin

Configuration

Backend

Frontend

Entity Annotation

Usage

​Features

​Installation

​Frontend Plugin

​Backend Plugin

​Configuration

​Backend

​Frontend

​Entity Annotation

​Usage

Features

Installation

Frontend Plugin

Backend Plugin

Configuration

Backend

Frontend

Entity Annotation

Usage