I am trying to initialize vault cluster with one leader and 2 followers. Using retry_join stanza to provide the leaders in each of the configs, when I execute vault operator init command it only initializes leader when trying to unseal vault on the followers get error saying ‘vault is not initialized’
Hi! this may be a bit old to reply to now, but what the heck. I am going through something similar now and figured I’d continue the discussion.
What you describe does not seem surprising to me - each vault instance starts sealed, unless you have auto-unseal. So, before it can join the cluster, it needs to be unsealed.
What behaviour were you expecting?
I believe you’re supposed to join the followers to the leader after you’ve initialized it – not before.