diff --git a/.circleci/config.yml b/.circleci/config.yml index f4344171d..95eebc064 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -1,6 +1,7 @@ # Copyright (c) HashiCorp, Inc. # SPDX-License-Identifier: MPL-2.0 + version: 2.1 orbs: slack: circleci/slack@3.4.2 diff --git a/templates/server-statefulset.yaml b/templates/server-statefulset.yaml index d7a34acb6..5b2479524 100644 --- a/templates/server-statefulset.yaml +++ b/templates/server-statefulset.yaml @@ -159,13 +159,8 @@ spec: port: 8200 scheme: {{ include "vault.scheme" . | upper }} {{- else }} - # Check status; unsealed vault servers return 0 - # The exit code reflects the seal status: - # 0 - unsealed - # 1 - error - # 2 - sealed exec: - command: ["/bin/sh", "-ec", "vault status -tls-skip-verify"] + command: {{- toYaml .Values.server.readinessProbe.exec.command | nindent 14 }} {{- end }} failureThreshold: {{ .Values.server.readinessProbe.failureThreshold }} initialDelaySeconds: {{ .Values.server.readinessProbe.initialDelaySeconds }} diff --git a/values.yaml b/values.yaml index 08e9f21f0..4e294ec12 100644 --- a/values.yaml +++ b/values.yaml @@ -465,6 +465,15 @@ server: # Used to define custom readinessProbe settings readinessProbe: enabled: true + + # Check status; unsealed vault servers return 0 + # The exit code reflects the seal status: + # 0 - unsealed + # 1 - error + # 2 - sealed + exec: + command: ["/bin/sh", "-ec", "vault status -tls-skip-verify"] + # If you need to use a http path instead of the default exec # path: /v1/sys/health?standbyok=true