vault-cli
vault-cli copied to clipboard
peopledoc
A configurable command-line interface tool (and python library) to interact with Hashicorp Vault
I've read the documentation and looked through the code but I don't see a way to set the authentication to use the ldap method. Is this supported? It might simply...
There should be a way to recusively display the secret tree without displaying actual secret values. We should display the mapping keys of the secret too (maybe with a flag)
It's not obvious that `--verify` is about the certificate, it could be named ``--verify-certificate`. Though, it would be right to keep the old one forever for compatibility.
```console vault env -p 'secret?' -- env vault env -p 'secret=BLA?' -- env ``` will omit the environment variable altogether if an error happens when trying to read the secret.
I am not sure if vault-cli is expected to work with v2 of kv in general since I had to add the 'data/' in the secret path myself to fetch...
Click already has an builtin function to implement the version flag for us. https://click.palletsprojects.com/en/7.x/api/#click.version_option
This test is not named correctly, and not running. https://github.com/peopledoc/vault-cli/blob/4875b0082411df2e204568165d6f32cb9c365156/tests/unit/test_settings.py#L159
`vault-cli get` doesn't return YAML formatted value when secret isn't a string. When secret value isn't a string, output of `vault get secret` should be the same as output of...
It would do a set, a list and get, and finally a delete and return with exit code zero if it all went well
I see this warning when running my tests: ``` ../../../../Library/Caches/pypoetry/virtualenvs/xxx-sT27uenX-py3.9/lib/python3.9/site-packages/vault_cli/metadata.py:5 /Users/cleancoder/Library/Caches/pypoetry/virtualenvs/xxx-sT27uenX-py3.9/lib/python3.9/site-packages/vault_cli/metadata.py:5: DeprecationWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html import pkg_resources ```
