vbackup

Import/export (encrypted) values between vault kv2 path and a YAML file.

TL;DR

go install github.com/flashbots/vbackup/cmd/vbackup@latest

AWS_PROFILE=xxxx \
vbackup export \
    --key arn:aws:kms:us-east-2:xxxxxxxxxxxx:key/yyyyyyyy-yyyy-yyyy-yyyy-yyyyyyyyyyyy \
    --mount secret/kv \
    --path path/to/some/nested/secret \
    --ignore subpath/you/want/to/ignore,another/subpath/you/want/to/ignore \
  vault.yaml

AWS_PROFILE=xxxx \
vbackup import \
    --dry-run \
    --key arn:aws:kms:us-east-2:xxxxxxxxxxxx:key/yyyyyyyy-yyyy-yyyy-yyyy-yyyyyyyyyyyy \
    --mount secret/kv \
    --path path/to/some/nested/secret \
  vault.yaml