kv get command retrieves the value from K/V secrets engine at the given
key name. If no key exists with that name, an error is returned. If a key exists
with the name but has no data, nothing is returned.
Retrieve the data of the key "creds":
$ vault kv get secret/creds====== Metadata ======Key Value--- -----created_time 2019-06-06T06:03:26.595978Zdeletion_time n/adestroyed falseversion 5 ====== Data ======Key Value--- -----passcode my-long-passcode
If K/V Version 1 secrets engine is enabled at "secret", the output has no metadata since there is no versioning information associated with the data:
$ vault kv get secret/creds====== Data ======Key Value--- -----passcode my-long-passcode
Return only the "creds" "passcode" key:
$ vault kv get -field=passcode secret/credsmy-long-passcode
There are no flags beyond the standard set of flags included on all commands.
(string: "")- Print only the field with the given name. Specifying this option will take precedence over other formatting directives. The result will not have a trailing newline making it ideal for piping to other processes.
(string: "table")- Print the output in the given format. Valid formats are "table", "json", or "yaml". This can also be specified via the
(int: 0)- Specifies the version to return. If not set the latest version is returned.