I’m running consul as a configuration manager and currently storing all values as plaintext. Does Consul have any built-in encryption features? Or is that better handled by Vault? Is there recommended approach to handling encryption at rest with Consul?
If you’re asking about communication, then yes, it’s already encrypted and all communications between nodes and agents are under TLS.
If you’re asking about storage, then no, that’s what Vault provides.
@aram Thanks for your reply. Yes I’m asking about storage. Vault seems like the most appropriate approach, but first I want to explore any other options for storing encrypted values before adding Vault as a new service.