direnv

You can use vkv and direnv to autimatically source KV secrets in your shell.

Prerequisites

• Install direnv and hook into your shell

Demo

Create in a project a .envrc file:

export VAULT_ADDR="https://vault:8200"
export VAULT_TOKEN="$(cat ~/.vault-token)"

eval $(vkv export -p kv/secrets -f export)

Now if you go into that directory and run direnv allow, you have the secrets under kv/secrets exported as env various:

env | grep OS_
OS_USER=admin
OS_PASSWORD=pasword