nsc vault export

Resolve vault references into a temporary environment file.

vault export reads an envdef file that maps environment variable names to vault references, resolves each reference to its secret value, and writes the result out as a temporary environment file. This is useful when a shell session or CI job needs secrets available as environment variables without ever hard-coding the secret values themselves.

With --shell, instead of writing a file vault export prints commands for the given shell, so the output can be sourced directly, e.g. source <(nsc vault export --envdef secrets.envdef --shell bash).

Usage

nsc vault export --envdef <file> [--shell <shell>]

Example

$ source <(nsc vault export --envdef secrets.envdef --shell bash)

Options

--envdef <file>

Load environment variable names and vault references from this file, rather than literal values. vault export resolves each reference against your workspace's vault before emitting it.

--shell <shell>