From 99d3cb4c8f8a47fab8a656a1944ff1f8889fc39a Mon Sep 17 00:00:00 2001
From: dev-qwen2 <dev-qwen2@disinto.local>
Date: Fri, 17 Apr 2026 01:18:03 +0000
Subject: [PATCH] fix: tech-debt: tools/vault-import.sh uses hardcoded secret/
 KV mount (#910)

---
 tools/vault-import.sh | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/tools/vault-import.sh b/tools/vault-import.sh
index bea4a07..f85dd16 100755
--- a/tools/vault-import.sh
+++ b/tools/vault-import.sh
@@ -151,9 +151,9 @@ _kv_put_secret() {
     -X POST \
     -d "$payload" \
     -o "$tmpfile" \
-    "${VAULT_ADDR}/v1/kv/data/${path}")" || {
+    "${VAULT_ADDR}/v1/${VAULT_KV_MOUNT:-kv}/data/${path}")" || {
     rm -f "$tmpfile"
-    _err "Failed to write to Vault at kv/data/${path}: curl error"
+    _err "Failed to write to Vault at ${VAULT_KV_MOUNT:-kv}/data/${path}: curl error"
     return 1
   }
   rm -f "$tmpfile"
@@ -164,15 +164,15 @@ _kv_put_secret() {
       return 0
       ;;
     404)
-      _err "KV path not found: kv/data/${path}"
+      _err "KV path not found: ${VAULT_KV_MOUNT:-kv}/data/${path}"
       return 1
       ;;
     403)
-      _err "Permission denied writing to kv/data/${path}"
+      _err "Permission denied writing to ${VAULT_KV_MOUNT:-kv}/data/${path}"
       return 1
       ;;
     *)
-      _err "Failed to write to Vault at kv/data/${path}: HTTP $http_code"
+      _err "Failed to write to Vault at ${VAULT_KV_MOUNT:-kv}/data/${path}: HTTP $http_code"
       return 1
       ;;
   esac