Vault Cheat Sheet

vault-sheet.md

Open vault-ui

xdg-open "http://localhost:8200/ui/"

Test Vault login via API

curl --silent -k -X GET -H "X-Vault-Token:00000000-0000-0000-0000-000000000000" 'http://127.0.0.1:8200/v1/auth/token/lookup-self'

Test Read Secret via API

curl --silent -k -X GET -H "X-Vault-Token:00000000-0000-0000-0000-000000000000" 'http://127.0.0.1:8200/v1/secret/data/test' | jq . 

Read K/V

export VAULT_ADDR='http://127.0.0.1:8200'
vault kv get secret/test

Read K/V in Json format

export VAULT_ADDR='http://127.0.0.1:8200'
vault kv get -format=json secret/test

Use JQ to get parts of the Json

export VAULT_ADDR='http://127.0.0.1:8200'
vault kv get -format=json simple_aws/dev | jq -r .data.data

Write values in KV store

vault kv put secret/test hello=world

Vault + Gradle

build.gradle

plugins {
  id "io.errorlab.gradle.vault" version "0.1.0"
}
vault { 
  addr = "http://localhost:8200"
  token = "00000000-0000-0000-0000-000000000000"
}
task testConf {
  doLast{
    println project.vault.get("secret/data/rds/dev").data.data["jdbc.url"]
    println project.vault.get("secret/data/rds/dev").data.data["user.pass"] 
  }
}

More on:
https://www.vaultproject.io/
https://www.vaultproject.io/api/secret/kv/kv-v2.html

Spring Vault:
https://cloud.spring.io/spring-cloud-vault/single/spring-cloud-vault.html
https://github.com/spring-cloud/spring-cloud-vault
https://github.com/spring-projects/spring-vault