summaryrefslogtreecommitdiff
path: root/learn/vault/README.md
blob: d6253e16643df01d016df6621f753bccf1bd2fed (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
# Vault

Start the server:

```bash
$ vault server -dev
```

```bash
モ vault export VAULT_ADDR=http://127.0.0.1:8200
モ vault export VAULT_TOKEN=hvs.example
モ vault kv put cubbyhole/rails session_secret=example
Success! Data written to: cubbyhole/rails
モ vault kv get cubbyhole/rails
========= Data =========
Key               Value
---               -----
session_secret    example
モ vault kv get -field=session_secret cubbyhole/rails
example
```

To create a new namespace for secrets you need to provide a path prefix.

```bash
モ vault secrets enable -path=rails kv
Success! Enabled the kv secrets engine at: rails/
モ vault secrets list
Path          Type         Accessor              Description
----          ----         --------              -----------
cubbyhole/    cubbyhole    cubbyhole_75d064e5    per-token private secret storage
identity/     identity     identity_d11fdd33     identity store
rails/        kv           kv_6ca5f254           n/a
secret/       kv           kv_c50fa680           key/value secret storage
sys/          system       system_5e571326       system endpoints used for control, policy and debugging
```