support custom exec command in server readiness probe

CHANGELOG.md

@@ -1,5 +1,9 @@
 ## Unreleased
 
+Improvements:
+
+* Support custom exec command in the server readiness probe [GH-1106](https://github.com/hashicorp/vault-helm/pull/1106)
+
 ## 0.30.0 (March 27, 2025)
 
 Changes:

templates/server-statefulset.yaml

@@ -172,7 +172,11 @@ spec:
             #   1 - error
             #   2 - sealed
             exec:
+              {{- if .Values.server.readinessProbe.execCommand }}
+              command: {{- toYaml .Values.server.readinessProbe.execCommand | nindent 14 }}
+              {{- else }}
               command: ["/bin/sh", "-ec", "vault status -tls-skip-verify"]
+              {{- end }}
             {{- end }}
             failureThreshold: {{ .Values.server.readinessProbe.failureThreshold }}
             initialDelaySeconds: {{ .Values.server.readinessProbe.initialDelaySeconds }}

test/unit/server-statefulset.bats

@@ -1236,11 +1236,18 @@ load _helpers
 
 @test "server/standalone-StatefulSet: readinessProbe default" {
   cd `chart_dir`
-  local actual=$(helm template \
+  local object=$(helm template \
       --show-only templates/server-statefulset.yaml \
       . | tee /dev/stderr |
-      yq -r '.spec.template.spec.containers[0].readinessProbe.exec.command[2]' | tee /dev/stderr)
+      yq -r '.spec.template.spec.containers[0].readinessProbe' | tee /dev/stderr)
+
+  local actual=$(echo $object |
+      yq -r '.exec.command[2]' | tee /dev/stderr)
   [ "${actual}" = "vault status -tls-skip-verify" ]
+
+  local actual=$(echo $object |
+      yq -r '.httpGet' | tee /dev/stderr)
+  [ "${actual}" = "null" ]
 }
 
 @test "server/standalone-StatefulSet: readinessProbe configurable" {
@@ -1253,6 +1260,44 @@ load _helpers
   [ "${actual}" = "null" ]
 }
 
+@test "server/standalone-StatefulSet: readiness execCommand configurable" {
+  cd `chart_dir`
+  local object=$(helm template \
+      --show-only templates/server-statefulset.yaml \
+      --set 'server.readinessProbe.execCommand={/bin/sh,-c,sleep}' \
+      . | tee /dev/stderr |
+      yq -r '.spec.template.spec.containers[0].readinessProbe' | tee /dev/stderr)
+
+  local actual=$(echo $object |
+      yq -r '.exec.command[2]' | tee /dev/stderr)
+  [ "${actual}" = "sleep" ]
+
+  local actual=$(echo $object |
+      yq -r '.httpGet' | tee /dev/stderr)
+  [ "${actual}" = "null" ]
+}
+
+@test "server/standalone-StatefulSet: readiness httpGet configurable" {
+  cd `chart_dir`
+  local object=$(helm template \
+      --show-only templates/server-statefulset.yaml \
+      --set 'server.readinessProbe.path=/v1/sys/health?standbyok=true' \
+      . | tee /dev/stderr |
+      yq -r '.spec.template.spec.containers[0].readinessProbe' | tee /dev/stderr)
+
+  local actual=$(echo $object |
+      yq -r '.exec' | tee /dev/stderr)
+  [ "${actual}" = "null" ]
+
+  local actual=$(echo $object |
+      yq -r '.httpGet' | tee /dev/stderr)
+  [ "${actual}" != "null" ]
+
+  local actual=$(echo $object |
+      yq -r '.httpGet.path' | tee /dev/stderr)
+  [ "${actual}" = "/v1/sys/health?standbyok=true" ]
+}
+
 @test "server/standalone-StatefulSet: readiness failureThreshold default" {
   cd `chart_dir`
   local actual=$(helm template \

values.schema.json

@@ -983,12 +983,18 @@
                         "enabled": {
                             "type": "boolean"
                         },
+                        "execCommand": {
+                            "type": "array"
+                        },
                         "failureThreshold": {
                             "type": "integer"
                         },
                         "initialDelaySeconds": {
                             "type": "integer"
                         },
+                        "path": {
+                            "type": "string"
+                        },
                         "periodSeconds": {
                             "type": "integer"
                         },

values.yaml

@@ -512,11 +512,17 @@ server:
   # Used to define custom readinessProbe settings
   readinessProbe:
     enabled: true
-    # If you need to use a http path instead of the default exec
+    # Set this, if you want to use a httpGet (path) instead of the default exec as the readinessProbe handler.
     # path: /v1/sys/health?standbyok=true
-
-    # Port number on which readinessProbe will be checked.
+    # Port number on which readinessProbe will be checked if httpGet is used as the readinessProbe handler.
     port: 8200
+
+    # If you need to overwrite default exec command, you can set it here.
+    # execCommand:
+    # - "/bin/sh"
+    # - "-ec"
+    # - "vault status -tls-skip-verify"
+
     # When a probe fails, Kubernetes will try failureThreshold times before giving up
     failureThreshold: 2
     # Number of seconds after the container has started before probe initiates