vault: use http health probes

services/vault/statefulset.yaml

@@ -74,19 +74,28 @@ spec:
             - name: SKIP_SETCAP
               value: "true"
           readinessProbe:
-            exec:
-              command: ["sh", "-c", "VAULT_ADDR=http://127.0.0.1:8200 vault status"]
+            httpGet:
+              path: /v1/sys/health?standbyok=true
+              port: api
             initialDelaySeconds: 10
             periodSeconds: 10
-            timeoutSeconds: 5
+            timeoutSeconds: 3
             failureThreshold: 6
           livenessProbe:
-            exec:
-              command: ["sh", "-c", "VAULT_ADDR=http://127.0.0.1:8200 vault status >/dev/null 2>&1 || true"]
+            httpGet:
+              path: /v1/sys/health?standbyok=true&sealedcode=204&uninitcode=204
+              port: api
             initialDelaySeconds: 60
             periodSeconds: 20
-            timeoutSeconds: 5
+            timeoutSeconds: 3
             failureThreshold: 6
+          resources:
+            requests:
+              cpu: 100m
+              memory: 256Mi
+            limits:
+              cpu: 500m
+              memory: 1Gi
           securityContext:
             runAsNonRoot: true
             runAsUser: 1000