SmokyZone/openbao
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Override BAO_ADDR to https now that TLS is enabled

Browse Source 
The chart hardcodes BAO_ADDR=http://127.0.0.1:8200 for its own
readiness/liveness probe CLI calls. With TLS enabled this made the pod
permanently NotReady ('Client sent an HTTP request to an HTTPS server').
Override via server.extraEnvironmentVars (Kubernetes uses last-wins for
duplicate env var names).

Co-authored-by: Copilot <[email protected]>
This commit is contained in:
SmokyZone
2026-09-18 20:25:25 +02:00
co-authored by Copilot
parent 5ef5aaa0d8
commit de5b5c635d
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
values.yaml
+7
View File
@@ -56,6 +56,13 @@ openbao:
cpu: 500m cpu: 500m
memory: 512Mi memory: 512Mi
# The chart hardcodes BAO_ADDR=http://127.0.0.1:8200 for internal CLI
# calls (readiness/liveness probes, etc.). Override it now that the
# listener speaks TLS, otherwise the pod never becomes Ready.
extraEnvironmentVars:
BAO_ADDR: https://127.0.0.1:8200
BAO_SKIP_VERIFY: "true"
ui: ui:
enabled: true enabled: true
# NodePort, same pattern as ArgoCD (30080/30443) and Gitea (30300): # NodePort, same pattern as ArgoCD (30080/30443) and Gitea (30300):