From the reference architecture docs for Vault with the Consul storage backend:
It is important to use a dedicated Consul cluster for Vault storage, separate from any Consul cluster used for other purposes, to minimize resource contention on the storage layer. This will likely necessitate using non-default ports for Consul network connectivity.
The documentation is then pretty thorough about getting that storage backend working. Now, once that is set up, should I run additional Consul agents on Vault servers to connect to my broader service discovery Consul cluster? Maybe it’s obviously the case, but I wanted to be sure I didn’t embark on some dead-end journey.