safe

A CLI to interact with HashiCorp Vault.

• Add a safe target:

safe target {vault_addr} {target_name}

• Authenticate the CLI client against the Vault server, using an authentication token:

safe auth {authentication_token}

• Print the environment variables describing the current target:

safe env

• Display a tree hierarchy of all reachable keys for a given path:

safe tree {path}

• Move a secret from one path to another:

safe move {old/path/to/secret} {new/path/to/secret}

• Generate a new 2048-bit SSH key-pair and store it:

safe ssh {2048} {path/to/secret}

• Set non-sensitive keys for a secret:

safe set {path/to/secret} {key}={value}

• Set auto-generated password in a secret:

safe gen {path/to/secret} {key}

Copyright © 2014—present the tldr-pages team and contributors.

This work is licensed under the Creative Commons Attribution 4.0 International License (CC-BY).