vault

A CLI to interact with HashiCorp Vault.

• Connect to a Vault server and initialize a new encrypted data store:

vault init

• Unseal (unlock) the vault, by providing one of the key shares needed to access the encrypted data store:

vault unseal {key-share-x}

• Authenticate the CLI client against the Vault server, using an authentication token:

vault auth {authentication_token}

• Store a new secret in the vault, using the generic back-end called "secret":

vault write secret/{hello} value={world}

• Read a value from the vault, using the generic back-end called "secret":

vault read secret/{hello}

• Read a specific field from the value:

vault read -field={field_name} secret/{hello}

• Seal (lock) the Vault server, by removing the encryption key of the data store from memory:

vault seal

Copyright © 2014—present the tldr-pages team and contributors.

This work is licensed under the Creative Commons Attribution 4.0 International License (CC-BY).