Multiple storage backends

[Justin LaRose]

Is it possible to config vault to write to multiple storage backends? For example, configuring vault to write to consul as well as zookeeper simultaneously? Then maybe read from one. 

[Michael Fischer]

What's the use case?

On Mon, Dec 7, 2015 at 8:35 AM, Justin LaRose <justin...@gmail.com> wrote:

Is it possible to config vault to write to multiple storage backends? For example, configuring vault to write to consul as well as zookeeper simultaneously? Then maybe read from one. 

--
This mailing list is governed under the HashiCorp Community Guidelines - https://www.hashicorp.com/community-guidelines.html. Behavior in violation of those guidelines may result in your removal from this mailing list.
 
GitHub Issues: https://github.com/hashicorp/vault/issues
IRC: #vault-tool on Freenode
---
You received this message because you are subscribed to the Google Groups "Vault" group.
To unsubscribe from this group and stop receiving emails from it, send an email to vault-tool+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/vault-tool/eed579d7-ff95-4101-88cb-55be97e9e88f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Justin LaRose]

No particular use case, just curious.

[Jeff Mitchell]

Hi Justin,

This is not currently possible, although at some point I expect Vault
to gain the ability to do HA coordination via one backend but have the
physical store be a different (not normally HA-capable) backend. I
would like to see this capability added (as would a number of users),
the main issue is just finding the time to slot it in...

--Jeff

> https://groups.google.com/d/msgid/vault-tool/9675628a-960b-4033-b717-7deb716b9967%40googlegroups.com.

[Karl Fischer]

Has there been any progress on this one?

I would like to mount multiple storage backends for vault.

As already mentioned, Vault HA could easily be achieved by using the consul storage backend. 

The drawback here is that consul restricts each value in its KV to have less than 512KB. 

Ideally, I would like to also mount another storage backend like s3 to be able to store bigger values with the generic secret backend. 

(As the docs do not mention anything about this I fear that it is not possible yet)