Patch one KV field vault
Update one field without rewriting the whole secret; note: kv patch needs KV-v2
vault kv patch -mount=secret app api_key=<id>
more vault
all 31 commands →
Response wrapping handoff
T=$(vault kv get -wrap-ttl=60s -field=wrapping_token -mount=secret app); vault unwrap $T
Check token path capabilities
vault token capabilities database/creds/readonly
Revoke a dynamic lease
vault lease revoke -prefix database/creds/readonly
Login with token
vault login <token>
Login with AppRole
vault write auth/approle/login role_id=<role> secret_id=<secret>