diff --git a/pkg/daemon/ceph/osd/kms/vault_api.go b/pkg/daemon/ceph/osd/kms/vault_api.go
index cde2be9e6..593ccca7b 100644
--- a/pkg/daemon/ceph/osd/kms/vault_api.go
+++ b/pkg/daemon/ceph/osd/kms/vault_api.go
@@ -84,6 +84,11 @@ func newVaultClient(clusterdContext *clusterd.Context, namespace string, secretC
 		return nil, err
 	}
 
+	// Set the namespace if the config has a namespace
+	if backendPath := GetParam(secretConfig, api.EnvVaultNamespace); backendPath != "" {
+		client.SetNamespace(secretConfig[api.EnvVaultNamespace])
+	}
+
 	// Configure the authentication method, either Token or Kubernetes.
 	// Both return a token
 	token, _, err := utils.Authenticate(client, c)