You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Feature Request:
At the moment service discovery feature is only available if vault is configured to use Consul KV as storage backend. When using other storage backends such as DynamoDB one has to go out of their way to ensure that vault service is correctly reflected in catalog. There is no simple configuration.
For an example lets say I wish to use DynamoDB storage and also register active.vault.service.consul and standby.vault.service.consul, I'll need to add two service definitions in local consul agent with same name and different tag. At any given point in time only one of those two services is bound to be healthy depending on the status of Vault agent.
Furthermore, the catalog will wrongly report half of the vault services as unhealthy and that sets off all kind of godforsaken alerts.
Other option is to write some sort of script which would register and deregister vault service in catalog with appropriate tags, but reliability is a big concern.
The text was updated successfully, but these errors were encountered:
Feature Request:
At the moment service discovery feature is only available if vault is configured to use Consul KV as storage backend. When using other storage backends such as DynamoDB one has to go out of their way to ensure that vault service is correctly reflected in catalog. There is no simple configuration.
For an example lets say I wish to use DynamoDB storage and also register
active.vault.service.consul
andstandby.vault.service.consul
, I'll need to add two service definitions in local consul agent with same name and different tag. At any given point in time only one of those two services is bound to be healthy depending on the status of Vault agent.Furthermore, the catalog will wrongly report half of the vault services as unhealthy and that sets off all kind of godforsaken alerts.
Other option is to write some sort of script which would register and deregister vault service in catalog with appropriate tags, but reliability is a big concern.
The text was updated successfully, but these errors were encountered: