For this example we will run Vault in dev mode.

First of all download latest version of Vault

To start the Vault dev server, run:

vault server -dev

Run command in console:

python init.py -t <token>

Open new console and export Vault address:

export VAULT_ADDR='http://127.0.0.1:8200'

Login to vault with root token and generate another token:

vault token create

Use this new token to login to Web UI

1. Standard situation

Generate token for read-only access:

vault token create -policy=my-policy-read

Test scripts:

python read.py -e dev -t <token>

python read.py -e prod -t <token>

2. Restricted access:

Generate token for restricted access:

vault token create -policy=my-policy-secure

Test scripts - from 1.a.

3. One-time password

Generate token for restricted access:

vault token create -policy=my-policy-read -use-limit=1

Test scripts - run first script from 1.a. twice

Generate token with write access to dev environment:

vault token create -policy=my-policy-dev

Test scripts:

python write.py -a update -t <token>

python write.py -a path -t <token>