Vault HA Cluster with Integrated Storage - Migration from Consul to raft storage backend.

[Sivakumar Nagarajan]

Hi,

Our current vault installation uses "Consul" as storage backend.

After reading through the documentation  "Vault HA Cluster with Integrated Storage" and understanding the challenges/benefits and functionality, we wanted to give it a try.   

So we wanted to check whether there is an option to migrate from "Consul" storage backend to "Raft".

Any pointers will be highly appreciated.

Thanks,

Siva

[Дмитрий Сорокин]

Hi Sivakumar,

To migrate storage you can use "vault operator migrate" command, here is sample code how it can be done.

$ cat <<EOF > /tmp/migrate.hcl

storage_source "consul" {

  path = "vault/"

}

storage_destination "raft" {

  path    = "/opt/vault/data"

}

cluster_addr = "http://127.0.0.1:8201"

EOF
$ mkdir -p /opt/vault/data
$ vault operator migrate -config=/tmp/migrate.hcl

now you have raft data store on your instance.

and you require to do some actions to reconfigure vault, that I'm yet to figure out.

Ref (https://www.vaultproject.io/docs/commands/operator/migrate.html#configuration)

--------------------------------------------------------------------------------------------------------------

I Have briefly investigated this topic.

but after steps mentioned above, I have faced some issues with vault not assembling into a cluster. I haven't got time to solve those yet.

Also, a quick question to a Vault team are there any plans to add something like consul's cloud auto-join to vault raft storage backend?

As I see it, currently you need to manually run command "vault operator raft join IP"

Kind Regards,

Dmitry

среда, 1 января 2020 г., 1:47:22 UTC+2 пользователь Sivakumar Nagarajan написал: