Generate dynamic DB credentials vault
Obtain short-lived Postgres credentials from the database secrets engine
vault read database/creds/readonly-role
more vault
all 31 commands →
Seal / unseal Vault
vault operator seal
vault operator unseal $UNSEAL_KEY
Patch one KV field
vault kv patch -mount=secret app api_key=<id>
Response wrapping handoff
T=$(vault kv get -wrap-ttl=60s -field=wrapping_token -mount=secret app); vault unwrap $T
Check token path capabilities
vault token capabilities database/creds/readonly
Revoke a dynamic lease
vault lease revoke -prefix database/creds/readonly