hashicorp vault operations

change secrets' path

vault login
vault kv list infra/devops/ansible-secrets/

old=netbird-server
new=netbird_server

old=netbird-agent
new=netbird_agent

default format

vault kv get infra/devops/ansible-secrets/$old > $old.secrets.raw
tac $old.secrets.raw | sed -n '1,/---/p' | tac | sed 1d > $old.secrets
cat $old.secrets

cat $old.secrets | while read line; do
    key=`echo $line | awk '{print $1}'`
    value=`echo $line | awk '{print $2}'`

    echo "$key=$value"
done > keyvalues
keyvalues=`cat keyvalues`
echo $keyvalues
vault kv put infra/devops/ansible-secrets/$new $keyvalues
rm -f keyvalues

json format

vault kv get -format=json infra/devops/ansible-secrets/$old | \
    jq -r .data.data > $old.json
cat $old.json

vault kv put infra/devops/ansible-secrets/$new @$old.json
rm -f $old.json

clean-up

and remove the old path from the UI –or– from the CLI

vault kv delete infra/devops/ansible-secrets/$old
vault kv metadata delete infra/devops/ansible-secrets/$old