Edit this page on GitHub
NOTE: This is a K/V Version 2 secrets engine command, and not available for Version 1.
kv destroy command permanently removes the specified versions' data
from the key/value secrets engine. If no key exists at the path, no action is
Destroy version 11 of the key "creds":
$ vault kv destroy -mount=secret -versions=11 creds Success! Data written to: secret/destroy/creds
There are no flags beyond the standard set of flags included on all commands.
(string: "table")- Print the output in the given format. Valid formats are "table", "json", or "yaml". This can also be specified via the
(string: "")- Specifies the path where the KV backend is mounted. If specified, the next argument will be interpreted as the secret path. If this flag is not specified, the next argument will be interpreted as the combined mount path and secret path, with /data/ automatically inserted for KV v2 secrets.
(int: <required>)- The versions to destroy. Their data will be permanently deleted.