Skip to content

README.md

Latest commit

 

History

History
39 lines (24 loc) · 854 Bytes

README.md

File metadata and controls

39 lines (24 loc) · 854 Bytes

Automation

Running expect in debug mode : exp_internal at the top

exp_internal 1

exect eof to close the expect script or use exit 0

Vault KVv2 Secrets Copier

A Python script to copy all secrets from KV v2 engines in one HashiCorp Vault instance to another, preserving secret structure, with support for:

  • Inclusion and exclusion lists for specific KV engines
  • Creating destination KV v2 engines if they do not exist
  • Reading tokens from environment variables or prompting securely
  • Optional write to destination (dry-run by default)
  • JSON dump of copied secrets for validation

🔧 Requirements

Install dependencies:

pip install hvac

Usage

python vault_copy.py --source-url <SOURCE_VAULT_URL> --destination-url <DEST_VAULT_URL> [--write]