Override BAO_ADDR to https now that TLS is enabled

The chart hardcodes BAO_ADDR=http://127.0.0.1:8200 for its own readiness/liveness probe CLI calls. With TLS enabled this made the pod permanently NotReady ('Client sent an HTTP request to an HTTPS server'). Override via server.extraEnvironmentVars (Kubernetes uses last-wins for duplicate env var names). Co-authored-by: Copilot <[email protected]>
2026-09-18 20:25:25 +02:00
parent 5ef5aaa0d8
commit de5b5c635d
1 changed files with 7 additions and 0 deletions
@@ -56,6 +56,13 @@ openbao:
        cpu: 500m
        memory: 512Mi

+    # The chart hardcodes BAO_ADDR=http://127.0.0.1:8200 for internal CLI
+    # calls (readiness/liveness probes, etc.). Override it now that the
+    # listener speaks TLS, otherwise the pod never becomes Ready.
+    extraEnvironmentVars:
+      BAO_ADDR: https://127.0.0.1:8200
+      BAO_SKIP_VERIFY: "true"
+
  ui:
    enabled: true
    # NodePort, same pattern as ArgoCD (30080/30443) and Gitea (30300):