Server

vkv server starts a **unauthenticated http server on port 127.0.0.01:8080 per default, that returns the kv secrets. This is useful during CI/CD setups.

See the CLI Reference for more details on the supported flags and env vars.

Server side

export VAULT_ADDR="..."
export VAULT_TOKEN="..." 
> vkv server --path secret
listening on 127.0.0.1:8080

Client side

$> curl localhost:8080/export
secret/
├── v1: admin [key=value]  
│   └── sub=********        
├── v1: demo
│   └── foo=***
└── sub/
    ├── v1: demo
    │   ├── demo=***********
    │   ├── password=******
    │   └── user=*****
    └── sub2
        └── v2: demo [admin=false key=value]
            ├── admin=***
            ├── foo=***
            ├── password=********
            └── user=****

Output Format

you can specify the output format by adding a format-URL Query Parameter:

$> curl localhost:8080/export?format=yaml
secret/:
  admin:
    sub: '********'
  demo:
    foo: '***'
  sub/:
    demo:
      demo: '***********'
      password: '******'
      user: '*****'
    sub2/:
      demo:
        admin: '***'
        foo: '***'
        password: '********'
        user: '****'

---

Last update: May 1, 2024