comms: mount vault signing key volume

services/comms/helmrelease.yaml

@@ -253,13 +253,19 @@ spec:
                           - name: comms-vault-entrypoint
                             mountPath: /entrypoint.sh
                             subPath: vault-entrypoint.sh
+                          - name: signingkey
+                            mountPath: /synapse/keys
+                            $patch: delete
+                          - name: signingkey-writable
+                            mountPath: /synapse/keys
                     volumes:
+                      - name: signingkey
+                        $patch: delete
                       - name: comms-vault-entrypoint
                         configMap:
                           name: comms-vault-entrypoint
                           defaultMode: 493
-                      - name: signingkey
+                      - name: signingkey-writable
-                        $patch: replace
                         emptyDir: {}
           - target:
               kind: Deployment
@@ -296,6 +302,18 @@ spec:
                             $patch: delete
                           - name: VAULT_ENV_FILE
                             value: /vault/secrets/redis-env.sh
+                        livenessProbe:
+                          exec:
+                            command:
+                              - sh
+                              - -c
+                              - . /vault/secrets/redis-env.sh && /health/ping_liveness_local.sh 5
+                        readinessProbe:
+                          exec:
+                            command:
+                              - sh
+                              - -c
+                              - . /vault/secrets/redis-env.sh && /health/ping_readiness_local.sh 1
                         volumeMounts:
                           - name: comms-vault-entrypoint
                             mountPath: /entrypoint.sh