If i have the database secrets engine at /database
and a database called info_db
. How can I read its root credentials using the vault cli (provided i have access to * of course)?
You cannot, as Vault deliberately makes the password
and private_key
fields of database configurations write-only:
(Well, unless you get at them via the disabled-by-default sys/raw/
debugging API.)