Skip to content
No description, website, or topics provided.
Shell Puppet HTML
Branch: master
Clone or download

Latest commit

Fetching latest commit…
Cannot retrieve the latest commit at this time.


Type Name Latest commit message Commit time
Failed to load latest commit information.

POC Vault cluster

6 vms

  • consul consul server to coordinate discovery and provide a backend for vault
  • vault0 vault server
  • vault1 a second vault server to demonstrate how HA works
  • mysql a mysql-server for the todo service to utilize. credentials are managed by vault
  • todo0 the demo service to see everything come together
  • todo1 a second demo service for HA

not just a simple vagrant up:

For vault to be secure, the bootstrapping process for a new vault server must be done out of band. Key shards must be provided to unseal the vault, and these should be entrusted to trusted people (by entrusting them to an automated process, you haven't secured anything - just added another turtle to the stack).

That said, for this POC we are automating it (but keeping the work separate from the normal automation to illustrate the separation). So that's what all the bash scripts coming up are all about.


Install puppet deps:


Bring up the infrastructure:

vagrant up consul vault0 vault1 mysql

Initialize, Unseal, and configure Vault:


Stand up the todo instances:


Verify everything came up correctly:

curl -X POST -d '{"status": "new", "content": "Hello World"}'
You can’t perform that action at this time.