disinto-admin/disinto
1
0
Fork 0
Code Issues 15 Pull requests 1 Projects Releases Packages Wiki Activity Actions

fix: tech-debt: tools/vault-import.sh uses hardcoded secret/ KV mount (#910)
All checks were successful
ci/woodpecker/push/ci Pipeline was successful
Details
ci/woodpecker/pr/ci Pipeline was successful
Details
ci/woodpecker/pr/secret-scan Pipeline was successful
Details

Browse source
This commit is contained in:
dev-qwen2 2026-04-17 01:18:03 +00:00
parent f93600a1cf
commit 99d3cb4c8f
1 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

10
tools/vault-import.sh
View file

@ -151,9 +151,9 @@ _kv_put_secret() {
-X POST \
-d "$payload" \
-o "$tmpfile" \
"${VAULT_ADDR}/v1/kv/data/${path}")" || {
"${VAULT_ADDR}/v1/${VAULT_KV_MOUNT:-kv}/data/${path}")" || {
rm -f "$tmpfile"
_err "Failed to write to Vault at kv/data/${path}: curl error"
_err "Failed to write to Vault at ${VAULT_KV_MOUNT:-kv}/data/${path}: curl error"
return 1
}
rm -f "$tmpfile"
@ -164,15 +164,15 @@ _kv_put_secret() {
return 0
;;
404)
_err "KV path not found: kv/data/${path}"
_err "KV path not found: ${VAULT_KV_MOUNT:-kv}/data/${path}"
return 1
;;
403)
_err "Permission denied writing to kv/data/${path}"
_err "Permission denied writing to ${VAULT_KV_MOUNT:-kv}/data/${path}"
return 1
;;
*)
_err "Failed to write to Vault at kv/data/${path}: HTTP $http_code"
_err "Failed to write to Vault at ${VAULT_KV_MOUNT:-kv}/data/${path}: HTTP $http_code"
return 1
;;
esac