diff --git a/k8s/security/iam/vault-values.yaml b/k8s/security/iam/vault-values.yaml
index 287c031..f357c1b 100644
--- a/k8s/security/iam/vault-values.yaml
+++ b/k8s/security/iam/vault-values.yaml
@@ -134,7 +134,8 @@ server:
 
       # api_addr: the address other Vault nodes (or HA standbys) use to reach
       # this node. Single-node standalone, but Vault requires it to be set.
-      api_addr = "http://vault.storage.svc.cluster.local:8200"
+      api_addr = "http://vault.iam.svc.cluster.local:8200"
+      cluster_addr = "https://vault-0.vault-internal.iam.svc.cluster.local:8201"
 
   # ── Service ─────────────────────────────────────────────────────────────────
   # NodePort 32171 — fallback for direct node access during bootstrap before