Hi, I am trying to TLS-encrypt the cluster communication between different Raft nodes in a Kubernetes/Helm setup. I can setup TLS encryption (using self-signed certs) in a standalone configuration but when I try a multi-node Raft configuration TLS is disabled on Vault server start-up for reasons that are unclear to me and not mentioned in the logs. Any help would be appreciated.
Vault Version: 1.15.2
Startup Logs:
Listener 1: tcp (addr: “[::]:8200”, cluster address: “[::]:8201”, max_request_duration: “1m30s”, max_request_size: “33554432”, tls: “disabled”)
Log Level:
Mlock: supported: true, enabled: false
Recovery Mode: false
Storage: raft (HA available)
Version: Vault v1.15.2, built 2023-11-06T11:33:28Z
Version Sha: cf1b5cafa047bc8e4a3f93444fcb4011593b92cb