A new platform for documentation and tutorials is launching soon.
We are migrating Vault documentation into HashiCorp Developer, our new developer experience.
kv get command retrieves the value from K/V secrets engine at the given
key name. If no key exists with that name, an error is returned. If a key exists
with the name but has no data, nothing is returned.
Retrieve the data of the key "creds":
$ vault kv get secret/creds ====== Metadata ====== Key Value --- ----- created_time 2019-06-06T06:03:26.595978Z deletion_time n/a destroyed false version 5 ====== Data ====== Key Value --- ----- passcode my-long-passcode
If K/V Version 1 secrets engine is enabled at "secret", the output has no metadata since there is no versioning information associated with the data:
$ vault kv get secret/creds ====== Data ====== Key Value --- ----- passcode my-long-passcode
Return only the "creds" "passcode" key:
$ vault kv get -field=passcode secret/creds my-long-passcode
There are no flags beyond the standard set of flags included on all commands.
(string: "")- Print only the field with the given name. Specifying this option will take precedence over other formatting directives. The result will not have a trailing newline making it ideal for piping to other processes.
(string: "table")- Print the output in the given format. Valid formats are "table", "json", or "yaml". This can also be specified via the
(int: 0)- Specifies the version to return. If not set the latest version is returned.