hashicorp#850 Make Vault server readiness probe exec command configur…

…able Signed-off-by: Brian Dunnigan <bdunnigan@clarityinnovates.com>
bdun1013 · Mar 10, 2023 · 17cb7ec · 17cb7ec
1 parent f4f05aa
commit 17cb7ec
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 6 deletions.
diff --git a/templates/server-statefulset.yaml b/templates/server-statefulset.yaml
@@ -159,13 +159,8 @@ spec:
               port: 8200
               scheme: {{ include "vault.scheme" . | upper }}
             {{- else }}
-            # Check status; unsealed vault servers return 0
-            # The exit code reflects the seal status:
-            #   0 - unsealed
-            #   1 - error
-            #   2 - sealed
             exec:
-              command: ["/bin/sh", "-ec", "vault status -tls-skip-verify"]
+              command: {{- toYaml .Values.server.readinessProbe.exec.command | nindent 14 }}
             {{- end }}
             failureThreshold: {{ .Values.server.readinessProbe.failureThreshold }}
             initialDelaySeconds: {{ .Values.server.readinessProbe.initialDelaySeconds }}

diff --git a/values.yaml b/values.yaml
@@ -465,6 +465,15 @@ server:
   # Used to define custom readinessProbe settings
   readinessProbe:
     enabled: true
+
+    # Check status; unsealed vault servers return 0
+    # The exit code reflects the seal status:
+    #   0 - unsealed
+    #   1 - error
+    #   2 - sealed
+    exec:
+      command: ["/bin/sh", "-ec", "vault status -tls-skip-verify"]
+
     # If you need to use a http path instead of the default exec
     # path: /v1/sys/health?standbyok=true