Vault

Secrets (KV) Commands

Store and retrieve secrets using Vault's KV (key-value) secrets engine. Supports versioning with KV v2.

7 commands

Pro Tips

Use KV v2 for secret versioning and metadata

Enable soft-delete to recover accidentally deleted secrets

Common Mistakes

Always use -mount flag with KV v2 to avoid path confusion

Commands

Write secret (KV v2)

$ vault kv put -mount=secret myapp/config username=admin password=secret123

Write a secret to KV v2 secrets engine.

Read secret

$ vault kv get -mount=secret myapp/config

Read a secret from KV secrets engine.

Read specific field

$ vault kv get -mount=secret -field=password myapp/config

Read a specific field from a secret.

List secrets

$ vault kv list -mount=secret myapp/

List secrets at a path.

Delete secret

$ vault kv delete -mount=secret myapp/config

Delete a secret (soft delete in v2).

Get secret metadata

$ vault kv metadata get -mount=secret myapp/config

Get secret metadata including versions.

Rollback to version

$ vault kv rollback -mount=secret -version=2 myapp/config

Rollback secret to a previous version.