Infisical PKI Signers API

The PKI Signers API from Infisical — 21 operation(s) for pki signers.

Documentation Provider Profile APIs.io OpenAPI GitHub

Infisical PKI Signers API is one of 73 APIs that Infisical publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include PKI Signers. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and authentication docs.

This API exposes 32 operations across 21 paths. It is described by OpenAPI 3.0.3, at version 0.0.1.

Requests are made against 3 base URLs: https://us.infisical.com, https://eu.infisical.com, http://localhost:8080.

32 operations 21 paths 0 schemas 4 DELETE13 GET5 PATCH9 POST1 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification

OpenAPI 3.0.3

API Version

0.0.1

Base URL

https://app.infisical.com

Authentication

HTTP Bearer

Resource Areas

Authentication & Security 1

Infisical PKI Signers API declares 1 security scheme for authenticating requests. It accepts HTTP bearer tokens (JWT) (bearerAuth).

bearerAuth — An access token in Infisical

Paths & Operations 32

Across 21 paths, the API surfaces 32 operations — 4 DELETE, 13 GET, 5 PATCH, 9 POST, 1 PUT. Each is listed below with its method, path, parameters, and response codes.

PKI Signers 32

POST

/api/v1/cert-manager/signers

Create a code signing signer

createSigner body → 200400401403404422500

GET

/api/v1/cert-manager/signers

List code signing signers for a project

listSigners 3 params → 200400401403404422500

GET

/api/v1/cert-manager/signers/{signerId}

Get a code signing signer by ID

getSignerById 1 param → 200400401403404422500

PATCH

/api/v1/cert-manager/signers/{signerId}

Update a code signing signer

updateSigner 1 param body → 200400401403404422500

DELETE

/api/v1/cert-manager/signers/{signerId}

Delete a code signing signer

deleteSigner 1 param → 200400401403404422500

GET

/api/v1/cert-manager/signers/{signerId}/permissions

Get the actor's effective resource permissions on this signer.

getSignerPermissions 1 param → 200400401403404422500

PATCH

/api/v1/cert-manager/signers/{signerId}/status

Enable or disable a signer in a single endpoint

updateSignerStatus 1 param body → 200400401403404422500

POST

/api/v1/cert-manager/signers/{signerId}/sign

Sign a pre-hashed digest with a code signing signer

signData 1 param body → 200400401403404422500

GET

/api/v1/cert-manager/signers/{signerId}/public-key

Get the public key for a code signing signer

getSignerPublicKey 1 param → 200400401403404422500

POST

/api/v1/cert-manager/signers/{signerId}/certificate/reissue

Re-issue the signer's certificate (optionally from a different CA)

reissueSignerCertificate 1 param body → 200400401403404422500

GET

/api/v1/cert-manager/signers/{signerId}/certificate

Export the signer's leaf certificate as PEM

exportSignerCertificate 1 param → 200400401403404422500

GET

/api/v1/cert-manager/signers/{signerId}/approval-policy

Read the signer's approval policy (steps, approvers, limits)

getSignerApprovalPolicy 1 param → 200400401403404422500

PUT

/api/v1/cert-manager/signers/{signerId}/approval-policy

Replace the signer's approval policy (steps, approvers, limits)

updateSignerApprovalPolicy 1 param body → 200

GET

/api/v1/cert-manager/signers/{signerId}/requests

List signing approval requests for a signer

listSignerRequests 4 params → 200

POST

/api/v1/cert-manager/signers/{signerId}/requests

Open a request to sign with this signer (operator self-serve)

requestToSign 1 param body → 200

POST

/api/v1/cert-manager/signers/{signerId}/requests/pre-approve

Pre-approve signing for a member (admin only)

preApproveSigning 1 param body → 200

POST

/api/v1/cert-manager/signers/{signerId}/requests/{requestId}/revoke

Revoke a pending or active signing request

revokeSignerRequest 2 params → 200

GET

/api/v1/cert-manager/signers/{signerId}/operations

List signing operations for a signer

listSigningOperations 4 params → 200400401403404422500

GET

/api/v1/cert-manager/signers/{signerId}/users

List user members of a signer

listSignerUserMembers 1 param → 200400401403404422500

POST

/api/v1/cert-manager/signers/{signerId}/users

Add user members to a signer

addSignerUserMembers 1 param body → 200400401403404422500

PATCH

/api/v1/cert-manager/signers/{signerId}/users/{userId}

Update a user member's role on a signer

updateSignerUserRole 2 params body → 200400401403404422500

DELETE

/api/v1/cert-manager/signers/{signerId}/users/{userId}

Remove a user from a signer

removeSignerUserMember 2 params → 200400401403404422500

GET

/api/v1/cert-manager/signers/{signerId}/effective-users

List users that can act on this signer either through a direct membership or through a group that's a signer member.

listSignerEffectiveUserMembers 1 param → 200400401403404422500

GET

/api/v1/cert-manager/signers/{signerId}/identities

List machine identity members of a signer

listSignerIdentityMembers 1 param → 200400401403404422500

POST

/api/v1/cert-manager/signers/{signerId}/identities

Add a machine identity to a signer

addSignerIdentityMember 1 param body → 200400401403404422500

PATCH

/api/v1/cert-manager/signers/{signerId}/identities/{identityId}

Update a machine identity's role on a signer

updateSignerIdentityRole 2 params body → 200400401403404422500

DELETE

/api/v1/cert-manager/signers/{signerId}/identities/{identityId}

Remove a machine identity from a signer

removeSignerIdentityMember 2 params → 200400401403404422500

GET

/api/v1/cert-manager/signers/{signerId}/effective-identities

List machine identities that can act on this signer either directly or via a group that's a signer member.

listSignerEffectiveIdentityMembers 1 param → 200400401403404422500

GET

/api/v1/cert-manager/signers/{signerId}/groups

List group members of a signer

listSignerGroupMembers 1 param → 200400401403404422500

POST

/api/v1/cert-manager/signers/{signerId}/groups

Add a group to a signer

addSignerGroupMember 1 param body → 200400401403404422500

PATCH

/api/v1/cert-manager/signers/{signerId}/groups/{groupId}

Update a group's role on a signer

updateSignerGroupRole 2 params body → 200400401403404422500

DELETE

/api/v1/cert-manager/signers/{signerId}/groups/{groupId}

Remove a group from a signer

removeSignerGroupMember 2 params → 200400401403404422500

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

Other APIs Infisical publishes across the network.

Infisical Admin API

AE Profile APIs.io

Infisical Alibaba Cloud Auth API

AE Profile APIs.io

Infisical App Connections API

AE Profile APIs.io

Infisical Audit Logs API

AE Profile APIs.io

Infisical AWS Auth API

AE Profile APIs.io

Infisical Azure Auth API

AE Profile APIs.io

Infisical Cert Manager API

AE Profile APIs.io

Infisical Dynamic Secrets API

AE Profile APIs.io

Infisical Environments API

AE Profile APIs.io

Infisical Event Subscriptions API

AE Profile APIs.io

Infisical Folders API

AE Profile APIs.io

Infisical GCP Auth API

AE Profile APIs.io

#PKI Signers

← Back to I APIs

Discovery

Learnings

Guidance

Toolbox

Alignment

API Evangelist LLC

Infisical PKI Signers API

Metadata

Authentication & Security 1

Paths & Operations 32

Specification

Source

API Details

Provider

Explore more

Discovery

Learnings

Guidance

Toolbox

Alignment

API Evangelist LLC

Infisical PKI Signers API

Metadata

Authentication & Security 1

Paths & Operations 32

Specification

Source

More from Infisical 12

API Details

Provider

Explore more