diff --git a/lib/puppet/functions/vault_lookup/lookup.rb b/lib/puppet/functions/vault_lookup/lookup.rb index 41b7d88..1289911 100644 --- a/lib/puppet/functions/vault_lookup/lookup.rb +++ b/lib/puppet/functions/vault_lookup/lookup.rb @@ -60,7 +60,9 @@ def auth_login_body(vault_cert_role) def get_secret(client, uri, token, namespace) headers = { 'X-Vault-Token' => token, 'X-Vault-Namespace' => namespace }.delete_if { |_key, value| value.nil? } - secret_response = client.get(uri, headers: headers) + secret_response = client.get(uri, + headers: headers, + options: { include_system_store: true }) unless secret_response.success? message = "Received #{secret_response.code} response code from vault at #{uri} for secret lookup" raise Puppet::Error, append_api_errors(message, secret_response)