From 098e5bf4e30f239b7ea0a7ede941d74ab429cc28 Mon Sep 17 00:00:00 2001
From: mvdbeek <m.vandenbeek@gmail.com>
Date: Tue, 21 Apr 2026 11:20:07 +0200
Subject: [PATCH] Do log exception on legacy fallback

---
 lib/galaxy/security/vault.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/lib/galaxy/security/vault.py b/lib/galaxy/security/vault.py
index 26a2eb0fde1..2fe24df4e2a 100644
--- a/lib/galaxy/security/vault.py
+++ b/lib/galaxy/security/vault.py
@@ -167,6 +167,7 @@ class HashicorpVault(Vault):
         try:
             response = self.client.secrets.kv.read_secret_version(path=legacy)
         except (hvac.exceptions.InvalidPath, hvac.exceptions.InvalidRequest):
+            log.exception(f"Failed to read secret from Hashicorp Vault at key: {key}")
             return None
         value = response["data"]["data"].get("value")
         if value is not None: