Fixes Namespace Concat Bug for KV2 secrets

dependency/vault_read.go

@@ -208,6 +208,16 @@ func shimKVv2Path(rawPath, mountPath string) string {
 		if strings.HasPrefix(p, "data/") || strings.HasPrefix(p, "metadata/") {
 			return rawPath
 		}
+
+		// If the raw path contains "/data/", it means the namespace on the Vault client
+		// is different from the namespace prefixing the rawPath. We want to
+		// keep the rawPath as is, and have the Vault client can pass the  namespace as it's header
+		// so the concatenation is handled by the Vault server.
+		if strings.Contains(p, "/data/") {
+			return rawPath
+
+		}
+
 		return path.Join(mountPath, "data", p)
 	}
 }