Vault Automation - Shell Makes Vault Easy

HashiCorp Vault is one of the best secret stores available. The seal/unseal mechanism along with RBAC and bunch of security policies, HashiCorp Vault does what every organization needs.

I run a set stateful self hosted Vault pods in HA to help our applications store secrets. Although an amazing tool, communicating through CLI sometimes can be tiresome, especially for simple tasks. If you aren't running Vault UI, CLI is the only option to interact with Vault.

This repo has scripts, which can be used to copy and delete the secrets recursively in user-defined paths. The repository contains two shell scripts to streamline secret management in HashiCorp Vault: `vault-copy.sh` and `vault-delete.sh`. These scripts provide easy methods to recursively copy or delete secrets within Vault, saving time and reducing the complexity of manual operations.

How to Use

1. Copying Secrets: Use vault-copy.sh to copy secrets from one Vault path to another. Example: ./vault-copy.sh secret/data/dev secret/data/prod
2. Deleting Secrets: Use vault-delete.sh to delete secrets and directories recursively. Example: ./vault-delete.sh secret/data/dev

GitHub: Repo with documentation!