Enable KV v2 secrets engine

Mount a KV version 2 secrets engine at 'secret/'

vault secrets enable -path=secret kv-v2
tool
vault31 commands
tags
vaultsecurity

More vault commands

  • Write a secret
    vault kv put secret/myapp/config db_password=s3cr3t api_key=abc123

    Store multiple key-value pairs at a path

  • Read a secret
    vault kv get -format=json secret/myapp/config | jq '.data.data'

    Read a KV v2 secret and extract the data payload

  • List secrets at path
    vault kv list secret/myapp/

    List all keys under a KV v2 prefix

  • Create periodic token
    vault token create -policy=read-only -period=24h -display-name=ci-pipeline

    Issue a renewable token with a 24h TTL for CI

  • Enable Kubernetes auth method
    vault auth enable kubernetes && vault write auth/kubernetes/config kubernetes_host=https://kubernetes.default.svc

    Allow pods to authenticate with Vault via ServiceAccount JWT

all 31 vault commands