diff --git a/values.yaml b/values.yaml
index f94e0ba..280c7cc 100644
--- a/values.yaml
+++ b/values.yaml
@@ -56,6 +56,13 @@ openbao:
         cpu: 500m
         memory: 512Mi
 
+    # The chart hardcodes BAO_ADDR=http://127.0.0.1:8200 for internal CLI
+    # calls (readiness/liveness probes, etc.). Override it now that the
+    # listener speaks TLS, otherwise the pod never becomes Ready.
+    extraEnvironmentVars:
+      BAO_ADDR: https://127.0.0.1:8200
+      BAO_SKIP_VERIFY: "true"
+
   ui:
     enabled: true
     # NodePort, same pattern as ArgoCD (30080/30443) and Gitea (30300):