PostgreSQL

Learn how to dynamically generate PostgreSQL Database user passwords.

The Infisical PostgreSQL secret rotation allows you to automatically rotate your PostgreSQL database user’s password at a predefined interval.

Prerequisite

1. Create a user with the required permission in your SQL instance.

Set up Dynamic Secrets with PostgreSQL

1

Open Secret Overview Dashboard

Open the Secret Overview dashboard and select the environment in which you would like to add a dynamic secret.

2

Click on the `Add Dynamic Secret` button

3

Select `SQL Database`

4

Provide the inputs for dynamic secret parameters

Secret Name

string

required

Name by which you want the secret to be referenced

Default TTL

string

required

Default time-to-live for a generated secret (it is possible to modify this value when a secret is generate)

Max TTL

string

required

Maximum time-to-live for a generated secret

Service

string

required

Choose the service you want to generate dynamic secrets for

Host

string

required

Database host

Port

number

required

Database port

User

string

required

Username that will be used to create dynamic secrets

Password

string

required

Password that will be used to create dynamic secrets

Database Name

string

required

Name of the database for which you want to create dynamic secrets

CA(SSL)

string

A CA may be required if your DB requires it for incoming connections. AWS RDS instances with default settings will requires a CA which can be downloaded here.

5

(Optional) Modify SQL Statements

If you want to provide specific privileges for the future generated dynamic secrets, you are able to specify them as SQL statements.

6

Click `Submit`

After submitting the form, you will see a dynamic secret creates in the dashboard.

If this step fails, you might have to add the CA certficate.

7

Generate dynamic secrets

Now that the dynamic secret is created, you can start generating unique secret values by specifying the Time-to-live within the predefined range.

After you click the Submit button, a new secret lease will be generated and the Database User and Database Password will be shown.

8

Audit or Revoke Leases

As soon as you have generated a few secret leases, you will be able to access them by clicking Generate on the dynamic secret row. In this modal, you are able to see the expiration time or delete a secret preemptively.