List secrets at path vault
List all keys under a KV v2 prefix
vault kv list secret/myapp/
more vault
all 31 commands →
Create periodic token
vault token create -policy=read-only -period=24h -display-name=ci-pipeline
Enable Kubernetes auth method
vault auth enable kubernetes && vault write auth/kubernetes/config kubernetes_host=https://kubernetes.default.svc
Generate dynamic DB credentials
vault read database/creds/readonly-role
Seal / unseal Vault
vault operator seal
vault operator unseal $UNSEAL_KEY
Patch one KV field
vault kv patch -mount=secret app api_key=<id>