vault-cli is a Python 3.6+ tool that offers simple interactions to manipulate secrets from Hashicorp Vault. With vault-cli, your secrets can be kept secret, while following 12-factor principles.
Some features
Configure once, use everywhere thanks to cascading (local, user, global) YAML configuration file
Read, browse, write, move, delete secrets easily
Read multiple secrets at once, as YAML
Launch processes with your secrets as environment variables
Launch processes with ssh-agent configured from your vault
Write templated files with secrets inside
vault-cli tries to make accessing secrets both secure and painless.
Showcase
Here are a few things you might do with vault-cli:
$ # Install:
$ pip install vault-cli
$ # Write a secret:
$ vault-cli set mysecret mykey --prompt
Please enter a value for key `mykey` of `mysecret`: *******
$ # Read a secret:
$ vault-cli get mysecret mykey
ohsosecret
$ # Load a secret into the environment variables:
$ vault-cli env --envvar mysecret -- env | grep MYSECRET
MYSECRET_MYKEY=ohsosecret
$ # Load an ssh key into your ssh-agent:
$ vault-cli ssh --key ssh_private_key -- ssh -T git@github.com
Hi <username>! You've successfully authenticated, but GitHub does not provide shell access.State
The package is young but supported and alive. We’re mindful of deprecations through semantic versionning and accepting bug reports and feature requests.
Where to go from here
The complete docs is probably the best place to learn about the project.
If you encounter a bug, or want to get in touch, you’re always welcome to open a ticket.
3 maintainers
Metadata
3 maintainers
Release files for vault-cli 3.1.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| vault-cli-3.1.0.tar.gz | 66.0 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| vault_cli-3.1.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 90.7 kB
Release files / vault-cli-3.1.0.tar.gz
| Download URL | vault-cli-3.1.0.tar.gz |
|---|---|
| Size | 66.0 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
6f7c354322f9f354c7f39cb9c642fd7cdf0f9c352235115400b62837fb4e1234
|
|
BLAKE2b-256 checksum How to use checksums |
fe121ec01a454b240c5bc43c574bd8062afdbdf741710eb0bcce1aba009cc964
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/3.7.1 importlib_metadata/4.8.2 pkginfo/1.8.2 requests/2.26.0 requests-toolbelt/0.9.1 tqdm/4.62.3 CPython/3.9.9
|
Release files / vault_cli-3.1.0-py3-none-any.whl
| Download URL | vault_cli-3.1.0-py3-none-any.whl |
|---|---|
| Size | 24.8 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
07f1271cecafc1096b6d56ff5f2ebae7c630fcbef038ee3e66ef7d83633a783d
|
|
BLAKE2b-256 checksum How to use checksums |
637df38a2bd403faa889696c9a67fd2990c933c4b8533dd888412dfb96f5cdfa
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/3.7.1 importlib_metadata/4.8.2 pkginfo/1.8.2 requests/2.26.0 requests-toolbelt/0.9.1 tqdm/4.62.3 CPython/3.9.9
|
