kv
The kv
command groups subcommands for interacting with Vault's key/value
secrets engine (both K/V Version 1 and K/V
Version 2.
Examples
Create or update the key named "creds" in the K/V Version 2 enabled at "secret" with the value "passcode=my-long-passcode":
$ vault kv put secret/creds passcode=my-long-passcodeKey Value--- -----created_time 2019-06-28T15:53:30.395814Zdeletion_time n/adestroyed falseversion 1
Read this value back:
$ vault kv get secret/creds====== Metadata ======Key Value--- -----created_time 2019-06-28T15:53:30.395814Zdeletion_time n/adestroyed falseversion 1 ====== Data ======Key Value--- -----passcode my-long-passcode
Get metadata for the key named "creds":
$ vault kv metadata get secret/creds========== Metadata ==========Key Value--- -----cas_required falsecreated_time 2019-06-28T15:53:30.395814Zcurrent_version 1delete_version_after 0smax_versions 0oldest_version 0updated_time 2019-06-28T15:53:30.395814Z ====== Version 1 ======Key Value--- -----created_time 2019-06-28T15:53:30.395814Zdeletion_time n/adestroyed false
Get a specific version of the key named "creds":
$ vault kv get -version=1 secret/creds====== Metadata ======Key Value--- -----created_time 2019-06-28T15:53:30.395814Zdeletion_time n/adestroyed falseversion 1 ====== Data ======Key Value--- -----passcode my-long-passcode
Usage
Usage: vault kv <subcommand> [options] [args] # ...Subcommands: delete Deletes versions in the KV store destroy Permanently removes one or more versions in the KV store enable-versioning Turns on versioning for a KV store get Retrieves data from the KV store list List data or secrets metadata Interact with Vault's Key-Value storage patch Sets or updates data in the KV store without overwriting put Sets or updates data in the KV store rollback Rolls back to a previous version of data undelete Undeletes versions in the KV store
For more information, examples, and usage about a subcommand, click on the name of the subcommand in the sidebar.