diff --git a/internal/vault/vault.go b/internal/vault/vault.go
index 5698d16f4..1a0ab570b 100644
--- a/internal/vault/vault.go
+++ b/internal/vault/vault.go
@@ -60,6 +60,7 @@ func ConfigureVault(dryRun bool, bootstrapOnly bool) {
 
   if bootstrapOnly {
 		viper.Set("vault.oidc_redirect_uris", "will-be-patched-later")
+		viper.WriteConfig()
 	}
 
 	vaultToken := viper.GetString("vault.token")