server:
  # HA mode with Raft integrated storage
  ha:
    enabled: true
    replicas: 3
    raft:
      enabled: true
      config: |
        ui = true
        listener "tcp" {
          address     = "0.0.0.0:8200"
          tls_disable = 1
        }
        storage "raft" {
          path = "/vault/data"
        }
        disable_mlock = true
        service_registration "kubernetes" {}
        telemetry {
          prometheus_retention_time = "30s"
          disable_hostname = true
        }

  standalone:
    enabled: false

  dataStorage:
    enabled: true
    size: 10Gi

  extraEnvironmentVars: {}

  # Tolerate control-plane taint
  tolerations:
    - key: node-role.kubernetes.io/control-plane
      operator: Exists
      effect: NoSchedule

# Enable ServiceMonitor for Prometheus
serverTelemetry:
  serviceMonitor:
    enabled: true
    selectors:
      release: prometheus
    interval: 30s