fix(vault): correct MinIO S3 backend endpoint/timeout/api_addr — converges to minio-cluster-hl:9000

k8s/security/iam/vault-values.yaml

@@ -124,16 +124,18 @@ server:
       # s3_force_path_style: MinIO uses path-style URLs (not virtual-hosted).
       # disable_ssl: MinIO in this cluster has no TLS.
       storage "s3" {
-        endpoint            = "http://minio.storage.svc.cluster.local:9000"
+        endpoint            = "http://minio-cluster-hl.storage.svc.cluster.local:9000"
         bucket              = "vault"
         region              = "us-east-1"
         s3_force_path_style = "true"
         disable_ssl         = "true"
+        max_parallel        = 128
       }
 
       # api_addr: the address other Vault nodes (or HA standbys) use to reach
       # this node. Single-node standalone, but Vault requires it to be set.
-      api_addr = "http://vault.storage.svc.cluster.local:8200"
+      api_addr = "http://vault.iam.svc.cluster.local:8200"
+      cluster_addr = "https://vault-0.vault-internal.iam.svc.cluster.local:8201"
 
   # ── Service ─────────────────────────────────────────────────────────────────
   # NodePort 32171 — fallback for direct node access during bootstrap before
@@ -169,3 +171,4 @@ serverTelemetry:
     selectors: {}
     interval: 30s
     scrapeTimeout: 10s
+