[incubator/vault] Fix liveness check when vault is sealed or uninitialized (#12043)

* expect successful response if uninitialized or sealed for liveness check

Signed-off-by: Janusz Bialy <jbialy@gmail.com>

* bump chart version

Signed-off-by: Janusz Bialy <jbialy@gmail.com>

* bump chart ver

Signed-off-by: Janusz Bialy <jbialy@gmail.com>

* liveness check should pass if vault is sealed

Signed-off-by: Janusz Bialy <jbialy@gmail.com>

* vault should be considered alive if sealed and uninitilized

Signed-off-by: Janusz Bialy <jbialy@gmail.com>

incubator/vault/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v1
 description: A Helm chart for Vault, a tool for managing secrets
 name: vault
-version: 0.16.0
+version: 0.16.1
 appVersion: 1.0.1
 home: https://www.vaultproject.io/
 icon: https://www.vaultproject.io/assets/images/mega-nav/logo-vault-0f83e3d2.svg

incubator/vault/templates/deployment.yaml

@@ -52,10 +52,11 @@ spec:
         - containerPort: {{ .Values.service.clusterPort }}
           name: cluster-address
         livenessProbe:
-          # Alive if in standby or active mode
+          # Alive if Vault is successfully responding to requests
           httpGet:
             path: /v1/sys/health?standbyok=true&
               {{- if .Values.vault.liveness.aliveIfUninitialized -}}uninitcode=204&{{- end }}
+              {{- if .Values.vault.liveness.aliveIfSealed -}}sealedcode=204&{{- end }}
             port: {{ .Values.service.port }}
             scheme: {{ if .Values.vault.config.listener.tcp.tls_disable -}}HTTP{{- else -}}HTTPS{{- end }}
             initialDelaySeconds: {{ .Values.vault.liveness.initialDelaySeconds }}

incubator/vault/values.yaml

@@ -152,7 +152,8 @@ vault:
   #   secret:
   #     secretName: some-secret
   liveness:
-    aliveIfUninitialized: false
+    aliveIfUninitialized: true
+    aliveIfSealed: true
     initialDelaySeconds: 30
     periodSeconds: 10
   readiness: