Recursively walk a Vault secret path prefix

vaultwalk.sh

#!/usr/bin/env bash

export VAULT_ADDR="http://${VAULT_IP}:${VAULT_PORT}"

vaultwalk() {
  local prefix
  local secret_keys

  prefix="${1}"
  if [ -z "${prefix}" ]; then
    prefix="secret/"
  fi

  if [ "${prefix: -1}" != "/" ]; then
    prefix="${prefix}/"
  fi


  secret_keys=$(vault list ${prefix} | tail -n+3)

  while IFS= read -r key; do
    local secret_key
    secret_key="${prefix}${key}"

    if [ "${secret_key: -1}" != "/" ]; then
      echo -n "${secret_key}: "
      vault read --format=json "${secret_key}" | jq -r ".data.value"
    else
      vaultwalk "${prefix}${key}"
    fi
  done <<< "${secret_keys}"
}