Skip to content
This repository was archived by the owner on Feb 22, 2022. It is now read-only.

[incubator/vault] Fix liveness check when vault is sealed or uninitialized #12043

Merged
merged 6 commits into from
Mar 24, 2019
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion incubator/vault/Chart.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
apiVersion: v1
description: A Helm chart for Vault, a tool for managing secrets
name: vault
version: 0.16.0
version: 0.16.1
appVersion: 1.0.1
home: https://www.vaultproject.io/
icon: https://www.vaultproject.io/assets/images/mega-nav/logo-vault-0f83e3d2.svg
Expand Down
3 changes: 2 additions & 1 deletion incubator/vault/templates/deployment.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -52,10 +52,11 @@ spec:
- containerPort: {{ .Values.service.clusterPort }}
name: cluster-address
livenessProbe:
# Alive if in standby or active mode
# Alive if Vault is successfully responding to requests
httpGet:
path: /v1/sys/health?standbyok=true&
{{- if .Values.vault.liveness.aliveIfUninitialized -}}uninitcode=204&{{- end }}
{{- if .Values.vault.liveness.aliveIfSealed -}}sealedcode=204&{{- end }}
port: {{ .Values.service.port }}
scheme: {{ if .Values.vault.config.listener.tcp.tls_disable -}}HTTP{{- else -}}HTTPS{{- end }}
initialDelaySeconds: {{ .Values.vault.liveness.initialDelaySeconds }}
Expand Down
3 changes: 2 additions & 1 deletion incubator/vault/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -152,7 +152,8 @@ vault:
# secret:
# secretName: some-secret
liveness:
aliveIfUninitialized: false
aliveIfUninitialized: true
aliveIfSealed: true
initialDelaySeconds: 30
periodSeconds: 10
readiness:
Expand Down