vault-mgmt 1.0.0

A collection of CLI tools for managing HashiCorp Vault.

Vault Management Toolkit 🧰

A collection of CLI tools for managing, comparing, migrating, and rolling out HashiCorp Vault clusters, with support for OIDC authentication and Kubernetes rollouts.

---

Features

• Secure OIDC Authentication for Vault clusters
• Detailed Secret Comparison between Vault instances
• Full RAFT Snapshot Migration with selective overrides
• Kubernetes Rollout Management for Vault clusters
• CLI entry point: vault-mgmt

---

Installation

Using pip (recommended)

pip install .
# or for development
pip install -e .

---

CLI Usage

The toolkit provides a unified CLI:

vault-mgmt [command] [options]

All commands support --help for more options.

---

Example Workflows

Compare Vaults

vault-mgmt compare --source-vault-addr ... --destination-vault-addr ... --output-file differences.csv

Sync Vaults with Overrides

vault-mgmt sync --source-vault-addr ... --destination-vault-addr ... --override-secrets differences.csv

Kubernetes Rollout

vault-mgmt rollout vault-namespace --vault-addr ... --kube-context ...

---

Development

• Testing:

  pytest
  

• Linting:

  ruff check .
  

• Tox:

  tox
  

---

Dependencies

Package	Version	Description
hvac	2.3.0	Python client for HashiCorp Vault API
kubernetes	33.1.0	Python client for Kubernetes API
requests	2.32.4	Elegant HTTP library (dependency of hvac)
tqdm	4.67.1	Progress bar for loops and iterables
certifi	2025.6.15	Mozilla's root certificates for SSL/TLS
charset-normalizer	3.4.2	Character set/encoding detection
idna	3.10	Internationalized Domain Names in Applications
urllib3	2.5.0	HTTP client for Python (dependency of requests)

---

Project Structure

• vault_mgmt/ — Main package with CLI and submodules:
  • cli.py — CLI entry point
  • compare.py — Vault comparison logic
  • sync.py — Vault migration/sync logic
  • rollout.py — Kubernetes rollout logic
  • manager.py — Shared management utilities

---

Links

• GitHub Repository
• Issue Tracker
• Changelog

---

License

GPL-3.0-only. See LICENSE.