Type '/' to Search

»kv get

The kv get command retrieves the value from K/V secrets engine at the given key name. If no key exists with that name, an error is returned. If a key exists with the name but has no data, nothing is returned.

»Examples

Retrieve the data of the key "creds":

$ vault kv get secret/creds
====== Metadata ======
Key              Value
---              -----
created_time     2019-06-06T06:03:26.595978Z
deletion_time    n/a
destroyed        false
version          5

====== Data ======
Key         Value
---         -----
passcode    my-long-passcode

$ vault kv get secret/creds====== Metadata ======Key              Value---              -----created_time     2019-06-06T06:03:26.595978Zdeletion_time    n/adestroyed        falseversion          5
====== Data ======Key         Value---         -----passcode    my-long-passcode

If K/V Version 1 secrets engine is enabled at "secret", the output has no metadata since there is no versioning information associated with the data:

$ vault kv get secret/creds
====== Data ======
Key         Value
---         -----
passcode    my-long-passcode

$ vault kv get secret/creds====== Data ======Key         Value---         -----passcode    my-long-passcode

Return only the "creds" "passcode" key:

$ vault kv get -field=passcode secret/creds
my-long-passcode

$ vault kv get -field=passcode secret/credsmy-long-passcode

»Usage

There are no flags beyond the standard set of flags included on all commands.

»Output Options

  • -field (string: "") - Print only the field with the given name. Specifying this option will take precedence over other formatting directives. The result will not have a trailing newline making it ideal for piping to other processes.

  • -format (string: "table") - Print the output in the given format. Valid formats are "table", "json", or "yaml". This can also be specified via the VAULT_FORMAT environment variable.

»Command Options

  • -version (int: 0) - Specifies the version to return. If not set the latest version is returned.