adding configuration for raft

btkrausen · Jan 8, 2021 · ce30efa · ce30efa
1 parent e52fef7
commit ce30efa
Showing 1 changed file with 25 additions and 0 deletions.
diff --git a/vault/config_files/vault_int_storage.hcl b/vault/config_files/vault_int_storage.hcl
@@ -0,0 +1,25 @@
+storage "raft" {
+  path    = "opt/vault/data"
+  node_id = "node-a-us-east-1.example.com"
+  retry_join {
+    auto_join = "provider=aws region=us-east-1 tag_key=vault tag_value=us-east-1"
+  }
+}
+listener "tcp" {
+ address = "0.0.0.0:8200"
+ cluster_address = "0.0.0.0:8201"
+ tls_disable = 0
+ tls_cert_file = "/etc/vault.d/client.pem"
+ tls_key_file = "/etc/vault.d/cert.key"
+ tls_disable_client_certs = "true"
+}
+seal "awskms" {
+  region = "us-east-1"
+  kms_key_id = "12345678-abcd-1234-abcd-123456789101",
+  endpoint = "example.kms.us-east-1.vpce.amazonaws.com"
+}
+api_addr = "https://vault-us-east-1.example.com:8200"
+cluster_addr = " https://node-a-us-east-1.example.com:8201"
+cluster_name = "vault-prod-us-east-1"
+ui = true
+log_level = "INFO"