secrets move

The secrets move command moves an existing secrets engine to a new path. Any leases from the old secrets engine are revoked, but all configuration associated with the engine is preserved. The command can be issued for a move within or across namespaces, using namespace prefixes in the arguments.

The command will trigger a remount operation and uses the returned migration ID to poll the status of the operation until reaching a terminal state of success or failure.

Moving a secrets engine revokes all leases associated with the engine.

After running this command, restart Vault to complete the move.

Examples

Move the existing secrets engine at ns1/secret/ to ns2/kv/:

$ vault secrets move ns1/secret/ ns2/kv/

Usage

There are no flags beyond the standard set of flags included on all commands.