Vault behind a load balancer with 2 backends on OCI Object Storage

Vault
1

Hi,
I am working on setting up Vault with OCI Object storage as backend behind a load balancer.

DNS → LB ->Two backends

When I am initializing the vault, I see both nodes are going to standby Node. Below is my configuration. Any suggestions please to get past this issue? I am wondering what would be the cluster_address I need to provide for vault config.

api_addr = “fqdn url”
cluster_name = “vault”
default_lease_ttl = “5m”
listener “tcp” {
address = “0.0.0.0:8200”
cluster_address = “0.0.0.0:8201”
#tls_cert_file = “/etc/vault.d/vault.crt”
tls_disable = “true”
#tls_key_file = “/etc/vault.d/key.pem”
}
log_level = “DEBUG”
max_lease_ttl = “30m”

storage “oci” {
auth_type_api_key = “false”
bucket_name = “vault”
ha_enabled = “true”
lock_bucket_name = “vault_lock”
namespace_name = “xxxxxxxx”
}

ui = “true”

2

For the cluster address you generally want to use the IP address of your VM/instance. Keep the port number like you have currently.

Note that there are two places to define the cluster address. One in the root of the config and one in the listener block. The cluster_addr in the root should be prefixed with the http scheme (i.e. https://<my_ip_addr>:8201) while the cluster_address in the listener section should just be the IP:port.

3

Thanks. I will try that and see. Also, I tried to put this in storage block and it works so far…
redirect_addr = “http://vault.example.com”
api_addr = “http://vault.example.com”
cluster_addr = “http://:8201”