$ unzip vault_1.3.2_linux_amd64.zip $ mv vault /usr/local/bin $ vault --version Vault v1.3.2 $ vault -autocomplete-install $ . .bashrc $ vault server -dev $ export VAULT_ADDR="http://127.0.0.1:8200" $ export VAULT_DEV_ROOT_TOKEN_ID="s.pKGs7KObPOp0Cx2ybiUWuEIW" $ vault kv put secret/chrisbinnie liverpool=best Key Value --- ----- created_time 2020-03-13T12:56:24.857347664Z deletion_time n/a destroyed false version 1 $ vault token create Key Value --- ----- token s.1xnAreJvUEKnKwKs1KVtcNyQ token_accessor DulIsR7BVxv6k4YF6JoMagb0 token_duration ? token_renewable false token_policies ["root"] identity_policies [] policies ["root"] $ vault revoke s.1xnAreJvUEKnKwKs1KVtcNyQ path "secret/data/*" { capabilities = ["create", "update"] } path "secret/data/chrisbinnie" { capabilities = ["read"] } $ vault policy fmt lab-policy.hcl Success! Formatted policy: lab-policy.hcl $ vault policy write lab-policy lab-policy.hcl Success! Uploaded policy: lab-policy $ vault policy list lab-policy default root $ vault policy read lab-policy path "secret/data/*" { capabilities = ["create", "update"] } path "secret/data/chrisbinnie" { capabilities = ["read"] } $ vault auth enable userpass Success! Enabled userpass auth method at: userpass/ $ vault write auth/userpass/users/chris password="nothingtoseehere" policies="lab-policy" Success! Data written to: auth/userpass/users/chris $ vault login -method=userpass username=chris password=nothingtoseehere $ vault kv help