vault_printer is a little program to extract a whole kv_store of a Vault Server to stdout in markdown. This could be used to print it out and store it in a physical safe somewhere. Or at least that's the purpose for which I wrote it.
Get a stable version from PyPi
pip install vault_printer
or via git
pip install git+https://github.com/DerMolly/vault_printer
E.g extract kv_store test from vault.example.com and login via ldap:
vault_printer --ldap vault.example.com test >> passwords.md
usage: vault_printer [-h] [--version] [-v] [--no-toc] [--no-content]
[--ldap | --token] [--username USERNAME]
[--password PASSWORD] [--tokenLogin TOKENLOGIN]
[url] kv_store
A program to get all secrets from a vault servers kv_store for printing
optional arguments:
-h, --help show this help message and exit
--version show program's version number and exit
-v, --verbose increase verbosity
--ldap login via ldap
--token login via token
server parameter:
url the url of the vault server
kv_store the kv store to export from
output configuration:
--no-toc don't print the toc
--no-content don't print the content
login parameter:
--username USERNAME, -u USERNAME
the username with which to login, if omitted you'll be
asked
--password PASSWORD, -p PASSWORD
the password to login, if omitted you'll be asked
--tokenLogin TOKENLOGIN, -t TOKENLOGIN
the token to login, if omitted you'll be asked
Currently the only supported login methods are:
- Token
- LDAP
Maybe I will add some more in the future. If you need another Login Method feel free to open a issue or even a PR.
This program also uses these environment variables if set
$VAULT_ADDR : the url of the vault server
$VAULT_TOKEN : the token to authenticate with the --token login method