HCP Vault Secrets

chezmoi includes support for HCP Vault Secrets using the vlt CLI to expose data through the hcpVaultSecret and hcpVaultSecretJson template functions.

Info

If you access HCP Vault Secrets through the hcp, these functions will not work. See vlt vs hcp: Upgrades that Break.

Warning

Hashicorp has announced the closure the Vault Secrets service for most customers 27 August 2025 with a recommendation of migrating to Hashicorp Vault, which is an enterprise-scale product.

This function will be removed from chezmoi after the service is no longer available.