hvac_vault_client_kv_v2_secret_write_read.py

1import hvac
2
3# Initialize the client
4# The url and token parameters are optional; if not provided, they will default to 
5# the VAULT_ADDR and VAULT_TOKEN environment variables respectively.
6client = hvac.Client(
7    url='http://127.0.0.1:8200',
8    token='dev-only-token',
9)
10
11# Check if the client is authenticated
12print(f'Is client authenticated: {client.is_authenticated()}')
13
14# Writing a secret to the KV V2 secrets engine
15# Note: The 'path' parameter is the name of the secret
16create_response = client.secrets.kv.v2.create_or_update_secret(
17    path='my-secret-password',
18    secret=dict(password='hashicorp'),
19)
20
21print('Secret written successfully.')
22
23# Reading the secret back
24read_response = client.secrets.kv.v2.read_secret_version(
25    path='my-secret-password',
26)
27
28# Extracting the password from the nested dictionary response
29password = read_response['data']['data']['password']
30
31if password == 'hashicorp':
32    print('Access granted!')
33else:
34    print('Access denied!')