1 Release 1 Tag

RSS Feed

• v1.0.0 b130d247c6

  Compare

  vault-tui v1.0.0 Stable

  f.weber released this 2026-08-14 11:34:41 +00:00 | 0 commits to main since this release

  v1.0.0

  First stable release of vault-tui. A terminal UI and CLI for HashiCorp Vault.

  Highlights

  • One codebase, two front ends: browse mounts/KV secrets, inspect version history, and log in via (almost) any Vault auth method — the TUI and the headless CLI share the exact same Service/Method abstraction.
  • Auth methods: token, oidc (browser + local callback listener), userpass/ldap/okta/radius (including Okta TOTP and best-effort Verify push polling), approle, github, jwt, kubernetes, cert. aws/azure/gcp available behind -tags cloud.
  • Config precedence: CLI flag > env var > profile > defaults block > builtin, with multi-profile support (--profile, p key in the TUI) and ~/.config/vault-tui/config.yaml including a first-run wizard.
  • Token storage modes: vault-cli (shares ~/.vault-token), profile (isolated per profile), none (never persisted, for CI).
  • Read-only by default: writes/deletes require --write, enforced identically in the TUI and CLI.
  • Destructive actions are guarded: confirmation overlay, plus a type-the-path-back confirmation for irreversible operations (destroy, non-KV-v2 delete).
  • Responsive TUI layout: adapts to terminal size, down to a "too small" notice below roughly 44×12 cells.
  • Theming & keybindings: fully configurable via theme:/keys:, including light/dark color pairs and a --no-color/NO_COLOR fallback.
  • vault-tui version: prints version (from the git tag), commit, and build date; automatically flags itself as [prerelease] when the underlying Gitea release was marked as a prerelease. The version is also shown in the TUI footer.

  Installation

  # prebuilt binaries (linux/darwin/windows × amd64/arm64) attached to this
  # release as vault-tui-v1.0.0-<os>-<arch>.tar.gz / .zip, with checksums
  
  # or build from source:
  git clone https://git.morlana.online/f.weber/vault-tui.git
  cd vault-tui
  make build          # dist/vault-tui        — no cloud auth
  make build-cloud     # dist/vault-tui-cloud  — with AWS/Azure/GCP auth
  

  Known limitations

  • Okta Verify push-number display is best-effort: the verify/<nonce> polling endpoint isn't part of Vault's documented public API, so a poll failure is silently ignored and the login falls back to waiting on the original request.

  Note

  This tool was built entirely by Claude (see README) — reviewed and tested for personal use, but with no maintenance guarantee. Pull requests are welcome.

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)