Fix Used Vault Namespace for Restrict Namespace Feature

ricoberger · Jan 23, 2024 · efbad61 · efbad61
1 parent 5a70aae
commit efbad61
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/vault/client.go b/vault/client.go
@@ -122,7 +122,7 @@ func (c *Client) GetSecret(secretEngine string, path string, keys []string, vers
 	// already failed.
 	if c.rootVaultNamespace != "" {
 		log.WithValues("rootVaultNamespace", c.rootVaultNamespace, "vaultNamespace", vaultNamespace).Info(fmt.Sprintf("Use Vault Namespace to read secret %s", path))
-		if vaultNamespace != "" {
+		if vaultNamespace != "" && !c.restrictNamespace {
 			c.client.SetNamespace(c.rootVaultNamespace + "/" + vaultNamespace)
 		} else {
 			c.client.SetNamespace(c.rootVaultNamespace)