hashicorp / terraform-google-vault

A Terraform Module for how to run Vault on Google Cloud using Terraform and Packer
Apache License 2.0
113 stars 75 forks source link

Consul no longer necessary? #29

Closed cdcme closed 5 years ago

cdcme commented 5 years ago

It seems that since April, GCS supports Vault's HA model: https://cloud.google.com/blog/products/gcp/improving-the-google-cloud-storage-backend-for-hashicorp-vault. Also, since February, Cloud Spanner can be used, too: https://cloud.google.com/blog/products/gcp/announcing-google-cloud-spanner-as-a-vault-storage-backend. So, for new infrastructure on GCP, what's the benefit of using Consul?

josh-padnick commented 5 years ago

It's a fair point. The main motivations for using Consul as the Vault backend are:

But honestly, for 95% of use cases, using GCS as a backend -- especially now that it supports HA -- should be fine.

cdcme commented 5 years ago

Thank you @josh-padnick—much appreciated.