summaryrefslogtreecommitdiff
path: root/learn/vault/README.md
diff options
context:
space:
mode:
Diffstat (limited to 'learn/vault/README.md')
-rw-r--r--learn/vault/README.md37
1 files changed, 37 insertions, 0 deletions
diff --git a/learn/vault/README.md b/learn/vault/README.md
new file mode 100644
index 0000000..d6253e1
--- /dev/null
+++ b/learn/vault/README.md
@@ -0,0 +1,37 @@
+# Vault
+
+Start the server:
+
+```bash
+$ vault server -dev
+```
+
+```bash
+モ vault export VAULT_ADDR=http://127.0.0.1:8200
+モ vault export VAULT_TOKEN=hvs.example
+モ vault kv put cubbyhole/rails session_secret=example
+Success! Data written to: cubbyhole/rails
+モ vault kv get cubbyhole/rails
+========= Data =========
+Key Value
+--- -----
+session_secret example
+モ vault kv get -field=session_secret cubbyhole/rails
+example
+```
+
+To create a new namespace for secrets you need to provide a path prefix.
+
+```bash
+モ vault secrets enable -path=rails kv
+Success! Enabled the kv secrets engine at: rails/
+モ vault secrets list
+Path Type Accessor Description
+---- ---- -------- -----------
+cubbyhole/ cubbyhole cubbyhole_75d064e5 per-token private secret storage
+identity/ identity identity_d11fdd33 identity store
+rails/ kv kv_6ca5f254 n/a
+secret/ kv kv_c50fa680 key/value secret storage
+sys/ system system_5e571326 system endpoints used for control, policy and debugging
+```
+