[Consul] New tutorial - Vault as Consul Connect service mesh Certification Authority

Hello there,

we just released a new Consul tutorial on how to configure Vault as Consul Connect service mesh Certification Authority.

The tutorial guides you on how to configure your new Consul datacenters to use Vault as Consul Connect service mesh CA and provides you with the step to migrate your existing datacenters CAs to Vault.

Happy integration!

2 Likes

So when following this tutorial, it seems to assume the connect_root is being populated elsewhere? I tried to follow another vault tutorial to do this, so I am trying to do the following command:

# vault write /sys/mounts/connect_root/generate/internal common_name=myvault.com ttl=87600h

Which gives me the error message:


URL: PUT https://x.x.x.x:8200/v1/sys/mounts/connect_root/generate/internal
Code: 400. Errors:

* backend type must be specified as a string

And I don’t understand how I am supposed to add that backend type the error message asks for. Any pointers?

Solving my own problem here: I missed the ending root at .../connect_root/root/ in the above url. The error message still doesn’t make any sense to me, but at least I am not getting the error anymore.