I have been reading the repo for the official terraform setup of vault in GCP. One thing that confused me is these couple of configuration lines
It looks like both storage and ha_storage are being used. But, why set up a bucket if we’re using consul anyway? What’s the expected behavior? Failover to storage if ha_storage is unavailable? Completely ignoring storage?
Hi Larry,
The ha_storage stanza is to define configuration for HA coordination. Even though the gcs storage backend supports HA (via ha_enabled), there are other types of backends that may not support it and thus have to also specify ha_storage separately in order to enable HA. The script may have been initially written before HA support for gcs got added (introduced in v0.10.0).