Note

This post is a thought. It's a short note that I make about someone else's content online. Learn more about the process thoughts

Here's my thought on πŸ’­ kv - Command | Vault | HashiCorp Developer


hashi vault lets you manage secrets right from your cli.


# set your vault url
export VAULT_ADDR=https://myvault.mydomain
vault login

# get a secret
vault kv get secret/hvac

# put a secret
vault kv put -mount=secret creds passcode=my-long-passcode

# get it
vault kv get secret/creds

# == Secret Path ==
# secret/data/creds
# 
# ======= Metadata =======
# Key                Value
# ---                -----
# created_time       2023-11-05T02:53:40.978120001Z
# custom_metadata    <nil>
# deletion_time      n/a
# destroyed          false
# version            3
# 
# ====== Data ======
# Key         Value
# ---         -----
# bar         baz
# passcode    my-long-passcode

# get one field
vault kv get -field=passcode secret/creds

# my-long-passcode
vault kv put -mount=secret creds bar=baz

# set more keys
vault kv put -mount=secret creds passcode=my-long-passcode bar=baz

# 
# == Secret Path ==
# secret/data/creds
# 
# ======= Metadata =======
# Key                Value
# ---                -----
# created_time       2023-11-05T03:24:14.65958906Z
# custom_metadata    <nil>
# deletion_time      n/a
# destroyed          false
# version            4

vault kv get secret/creds

# == Secret Path ==
# secret/data/creds
# 
# ======= Metadata =======
# Key                Value
# ---                -----
# created_time       2023-11-05T02:53:40.978120001Z
# custom_metadata    <nil>
# deletion_time      n/a
# destroyed          false
# version            4
# 
# ====== Data ======
# Key         Value
# ---         -----
# bar         baz
# passcode    my-long-passcode

This post was a thought by Waylon Walker see all my thoughts at https://waylonwalker.com/thoughts