diff --git a/services/vault/statefulset.yaml b/services/vault/statefulset.yaml index bd15607f..8c8d4a94 100644 --- a/services/vault/statefulset.yaml +++ b/services/vault/statefulset.yaml @@ -74,19 +74,28 @@ spec: - name: SKIP_SETCAP value: "true" readinessProbe: - exec: - command: ["sh", "-c", "VAULT_ADDR=http://127.0.0.1:8200 vault status"] + httpGet: + path: /v1/sys/health?standbyok=true + port: api initialDelaySeconds: 10 periodSeconds: 10 - timeoutSeconds: 5 + timeoutSeconds: 3 failureThreshold: 6 livenessProbe: - exec: - command: ["sh", "-c", "VAULT_ADDR=http://127.0.0.1:8200 vault status >/dev/null 2>&1 || true"] + httpGet: + path: /v1/sys/health?standbyok=true&sealedcode=204&uninitcode=204 + port: api initialDelaySeconds: 60 periodSeconds: 20 - timeoutSeconds: 5 + timeoutSeconds: 3 failureThreshold: 6 + resources: + requests: + cpu: 100m + memory: 256Mi + limits: + cpu: 500m + memory: 1Gi securityContext: runAsNonRoot: true runAsUser: 1000