Tech. Exercise envrionment is based the following pages.
https://learn.hashicorp.com/vault/operations/ops-vault-ha-consul
https://learn.hashicorp.com/vault/operations/ops-deployment-guide
This environment consists of 2 Valut Server Instances (with consul agent), 3 Consul Server Instances and 1 PostgreSQL RDS Instance.
Vault Server will be configured as HA mode and use Consul as the storage backend.
For Vault dynamic secrets live demo, PostgreSQL will be used.
All of the provisioning will be done by Terraform. Shell Script is used for configuring each service this time. Next time shell script will be replaced by one of the Configuration Management Tool. (Ansbile will be my choice)
- Provision & Configure Consul Server Instances
- Provision & Congfigure Vault Server, Consul agent
- Provision RDS Instance