Vault: Get key value secrets

Question

I've created this secret backend:

$ vault secrets enable -path=openshift kv
$ vault write openshift/postgresql username=tdevhub
$ vault write openshift/postgresql password=password

I don't quite figure out how to read username and password values.

I've tried with:

$ vault read openshift/postgresql/password

or

$ vault kv get openshift/post...

By other hand, when I perform this command line:

$ vault kv get openshift/postgresql                   
====== Data ======
Key         Value
---         -----
username    tdevhub

I'd like to store username and password into a secret backend. I've realized that a kv secret backend only is able to store one key... is it right?

How could I get my goal?

Answer 1

you can read secrets using

vault kv get -field=password openshift/postgresql

or

vault kv get -field=username openshift/postgresql

Answer 2

You can use the flags -format json and -field=data to get all the data under a given key properly formatted in JSON. This also filters out the extra details.

vault kv get -format json -field=data openshift/postgresql

The output you would get is -

{
  "username": "tdevhub",
  "password": "password"
}