mirror of
https://github.com/hashicorp/vault.git
synced 2025-08-22 15:11:07 +02:00
0660ea6fac
* Update README Let contributors know that docs will now be located in UDR * Add comments to each mdx doc Comment has been added to all mdx docs that are not partials * chore: added changelog changelog check failure * wip: removed changelog * Fix content errors * Doc spacing * Update website/content/docs/deploy/kubernetes/vso/helm.mdx Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com> --------- Co-authored-by: jonathanfrappier <92055993+jonathanfrappier@users.noreply.github.com> Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>
91 lines
3.4 KiB
Plaintext
91 lines
3.4 KiB
Plaintext
---
|
|
layout: docs
|
|
page_title: patch - Command
|
|
description: |-
|
|
The "patch" command updates data in Vault at the given path. The data can be
|
|
credentials, secrets, configuration, or arbitrary data. The specific behavior
|
|
of this command is determined at the thing mounted at the path.
|
|
---
|
|
|
|
> [!IMPORTANT]
|
|
> **Documentation Update:** Product documentation, which were located in this repository under `/website`, are now located in [`hashicorp/web-unified-docs`](https://github.com/hashicorp/web-unified-docs), colocated with all other product documentation. Contributions to this content should be done in the `web-unified-docs` repo, and not this one. Changes made to `/website` content in this repo will not be reflected on the developer.hashicorp.com website.
|
|
|
|
# patch
|
|
|
|
The `patch` command updates data in Vault at the given path (wrapper command for
|
|
HTTP PATCH using the [JSON Patch format](https://datatracker.ietf.org/doc/html/rfc6902)).
|
|
The data can be credentials, secrets, configuration, or arbitrary data. The specific
|
|
behavior of the `patch` command is determined at the thing mounted at the path.
|
|
|
|
Data is specified as "**key=value**" pairs on the command line. If the value begins
|
|
with an "**@**", then it is loaded from a file. If the value for a key is "**-**", Vault
|
|
will read the value from stdin rather than the command line.
|
|
|
|
Some API fields require more advanced structures such as maps. These cannot
|
|
directly be represented on the command line. However, direct control of the
|
|
request parameters can be achieved by using `-` as the only data argument.
|
|
This causes `vault patch` to read a JSON blob containing all request parameters
|
|
from stdin. This argument will be ignored if used in conjunction with any
|
|
"key=value" pairs.
|
|
|
|
For a full list of examples and paths, please see the documentation that
|
|
corresponds to the secrets engines in use.
|
|
|
|
Unlike [the `write` command](/vault/docs/commands/write), the `patch` command only
|
|
modifies data specified on the command line.
|
|
|
|
## Examples
|
|
|
|
Updates a PKI role to modify a single parameter:
|
|
|
|
```shell-session
|
|
$ vault patch pki/roles/example allow_localhost=false
|
|
```
|
|
|
|
### API versus CLI
|
|
|
|
Updates a PKI role to modify the `allow_localhost` parameter:
|
|
|
|
```shell-session
|
|
$ vault patch pki/roles/example allow_localhost=false
|
|
```
|
|
|
|
Equivalent cURL command for this operation:
|
|
|
|
```shell-session
|
|
$ tee request_payload.json -<<EOF
|
|
{
|
|
"organization": "hashicorp"
|
|
}
|
|
EOF
|
|
|
|
$ curl --header "X-Vault-Token: $VAULT_TOKEN" \
|
|
--request PATCH \
|
|
--header 'Content-Type: application/merge-patch+json'
|
|
--data @request_payload.json \
|
|
$VAULT_ADDR/v1/pki/roles/example
|
|
```
|
|
|
|
The `vault patch` command simplifies the API call.
|
|
|
|
## Usage
|
|
|
|
The following flags are available in addition to the [standard set of
|
|
flags](/vault/docs/commands) included on all commands.
|
|
|
|
### Output options
|
|
|
|
- `-field` `(string: "")` - Print only the field with the given name, in the format
|
|
specified in the `-format` directive. The result will not have a trailing
|
|
newline making it ideal for piping to other processes.
|
|
|
|
- `-format` `(string: "table")` - Print the output in the given format. Valid
|
|
formats are "table", "json", or "yaml". This can also be specified via the
|
|
`VAULT_FORMAT` environment variable.
|
|
|
|
### Command options
|
|
|
|
- `-force` `(bool: false)` - Allow the operation to continue with no key=value
|
|
pairs. This allows writing to keys that do not need or expect data. This is
|
|
aliased as `-f`.
|