iT邦幫忙

2021 iThome 鐵人賽

DAY 13
0
DevOps

Hashicorp Jot Notes系列 第 13

Day 13. Hashicorp Vault: HA with Integrated Storage

Hashicorp Vault: HA with Integrated Storage

昨天有提到HA的storage由Consul改為Integrated Storage,Vault資料儲存是儲放在local上,再透過Raft Consensus Algorithm與其他node做溝通。

設定

官方強烈建議設定disable_mlock = true

...

disable_mlock = true  #官方強烈建議
storage "raft" {
  performance_multiplier = 1
  path    = "/vault/data"
  node_id = "vault-01"
  
  retry_join {
    leader_api_addr = "https://10.x.x.1:8200"
    leader_ca_cert_file = "/vault/ssl/ca.cer"
    leader_client_cert_file = "/vault/ssl/cert.crt"
    leader_client_key_file = "/vault/ssl/public.key"
  }
  retry_join {
    leader_api_addr = "https://10.x.x.2:8200"
    leader_ca_cert_file = "/vault/ssl/ca2.cer"
    leader_client_cert_file = "/vault/ssl/cert2.crt"
    leader_client_key_file = "/vault/ssl/public2.key"
  }
  retry_join {
    leader_api_addr = "https://10.x.x.3:8200"
    leader_ca_cert_file = "/vault/ssl/ca3.cer"
    leader_client_cert_file = "/vault/ssl/cert3.crt"
    leader_client_key_file = "/vault/ssl/public3.key"
  }
  
}

...

上一篇
Day 12. Hashicorp Vault: HA with Consul
下一篇
Day 14. Hashicorp Vault: Backup (Consul)
系列文
Hashicorp Jot Notes30

尚未有邦友留言

立即登入留言