When using Namespaces in Vault, there is no possibility to configure integration with Zabbix, since the query path will automatically add "data".
Based on the documentation, when using Namespaces, the path to the secret will look like this ns1/ns2/zabbix/data/macros, there zabbix is engine. In the value of the zabbix macro, we should then specify the path to the secret like this ns1/ns2/zabbix/macros:some-secret, but since Zabbix automatically adds "data", then we have the next URL for query https://127.0.0.1:8200/v1/ns1/data/ns2/zabbix/zabbix/macros
In the log we can observe the following error:
In zbx_http_get() URL 'https://127.0.0.1:8200/v1/ns1/data/ns2/zabbix/macros'
End of zbx_http_get():SUCCEED
cannot get secrets for path "ns1/ns2/zabbix/macros": unsuccessful response code "403"
Since many large organizations use Vault as a service, it cannot be configured without Namespaces. Therefore, it would be worth removing the automatic addition of "DATA" to the path and slightly changing the documentation, explaining to users how they need to form a request, besides, this moment is already mentioned in the documentation, with manual testing using CURL
zabbix version: Zabbix 5.4.10
vault version: 1.9.2+ent