Comments (2)
Hi @Kyrklund
My team swapped to using a Consul backend shortly after I had finished writing this so we don't actually run this in production. I think if we wanted to use isSelf
as you pointed out we would need to call local Vault instance (and skip any TLS verification) of the individual nodes for the leader check, as invoking the Vault API address just calls into the HA cluster itself - which always returns isSelf of true.
I can't remember any reason why I did not opt for this approach, and assuming the existing behavior still works I don't have any problem changing it if it can help make the project usable for your team. Not sure when I would get to it, but if you have any interest in making a PR and testing out your changes, I would be happy to review and merge it in.
from vault_raft_snapshot_agent.
I see, and totally understand :)
In our setup we do call the local address on each node, but we still use TLS (DNS record for each node with matching cert)
I did do PR just in case, and you can merge it in if you think it looks good
PR #4
from vault_raft_snapshot_agent.
Related Issues (16)
- Different frequency for each storage backend HOT 1
- Every instance is executing the upload
- No license is stated for this project HOT 1
- Feature-Request: sturctured logging / log-format json
- Compilation fails on go 1.15
- [Feature] Timeout parameter support when snapshot a huge raft cluster
- snapshot agent service does not create snapshots HOT 1
- k8s auth documentation error
- Not performing snapshots when running on the leader HOT 1
- Support encryption
- Create a fork? HOT 5
- Intermittent 0 byte snapshots with S3 storage HOT 2
- any way to skip tls certificate verify? HOT 1
- Majority of aws snaps fail to upload, none delete. HOT 1
- Kubernetes HOT 21
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from vault_raft_snapshot_agent.