From c015c72f6db6dc5daa7b003f9b8d7891570d240a Mon Sep 17 00:00:00 2001
From: Vault Automation <github-team-secure-vault-core@hashicorp.com>
Date: Wed, 15 Oct 2025 16:45:17 -0400
Subject: [PATCH] hide Secrets Recovery in HVD clusters (#10142) (#10155)

Co-authored-by: lane-wetmore <lane.wetmore@hashicorp.com>
---
 ui/app/components/sidebar/nav/cluster.hbs             |  2 +-
 .../components/sidebar/nav/cluster-test.js            | 11 +++++++++++
 2 files changed, 12 insertions(+), 1 deletion(-)

diff --git a/ui/app/components/sidebar/nav/cluster.hbs b/ui/app/components/sidebar/nav/cluster.hbs
index c973db98e6..222b22b243 100644
--- a/ui/app/components/sidebar/nav/cluster.hbs
+++ b/ui/app/components/sidebar/nav/cluster.hbs
@@ -16,7 +16,7 @@
       data-test-sidebar-nav-link="Secrets Sync"
     />
   {{/if}}
-  {{#unless this.cluster.dr.isSecondary}}
+  {{#unless (or this.cluster.dr.isSecondary this.flags.isHvdManaged)}}
     <Nav.Link
       @route="vault.cluster.recovery.snapshots"
       @text="Secrets Recovery"
diff --git a/ui/tests/integration/components/sidebar/nav/cluster-test.js b/ui/tests/integration/components/sidebar/nav/cluster-test.js
index a27a89b51c..41a0bff48d 100644
--- a/ui/tests/integration/components/sidebar/nav/cluster-test.js
+++ b/ui/tests/integration/components/sidebar/nav/cluster-test.js
@@ -263,4 +263,15 @@ module('Integration | Component | sidebar-nav-cluster', function (hooks) {
 
     assert.dom(GENERAL.navLink('Vault Usage')).exists();
   });
+
+  test('it does NOT show Secrets Recovery when user is in HVD admin namespace', async function (assert) {
+    this.flags.featureFlags = ['VAULT_CLOUD_ADMIN_NAMESPACE'];
+
+    const namespace = this.owner.lookup('service:namespace');
+    namespace.setNamespace('admin');
+
+    await renderComponent();
+
+    assert.dom(GENERAL.navLink('Secrets Recovery')).doesNotExist();
+  });
 });