Enable KV v2 secrets engine vault
Mount a KV version 2 secrets engine at 'secret/'
vault secrets enable -path=secret kv-v2
more vault
all 31 commands →
Write a secret
vault kv put secret/myapp/config db_password=s3cr3t api_key=abc123
Read a secret
vault kv get -format=json secret/myapp/config | jq '.data.data'
List secrets at path
vault kv list secret/myapp/
Create periodic token
vault token create -policy=read-only -period=24h -display-name=ci-pipeline
Enable Kubernetes auth method
vault auth enable kubernetes && vault write auth/kubernetes/config kubernetes_host=https://kubernetes.default.svc