vkv

README

vkv is a little CLI tool written in Go, which enables you to list, compare, import, document, backup & encrypt secrets from a HashiCorp Vault KV-v2 engine:

Features

• recursively print secrets of any KVv2 Engine in json, yaml, markdown and other formats
• engine export shows the secret version as well as its custom metadata
• customize the output (show only-keys, only-paths, mask/unmask secrets) via flags or environment
• print the CRUD-capabilities of the authenticated token for each KV-path (format: policy)
• print secrets in export <key>=<value> format for variable exporting (format: export)
• import secrets back to Vault from vkv's json or yaml format
• save and restore KVv2 snapshots (including namespaces)
• list all engines or namespaces for scripting purposes
• handy snippets for managing KVv2 engines using fzf, sops & diff

Checkout the Quickstart Guide to learn more about vkv