Merge pull request #3927 from hashicorp/docs-encrypt-key-note

Docs: Clarify encrypt key for WAN joined DCs
This commit is contained in:
Jack Pearkes 2018-03-22 14:16:02 -07:00 committed by GitHub
commit 9a91b4eaef
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 0 deletions

View File

@ -18,6 +18,8 @@ Enabling gossip encryption only requires that you set an encryption key when
starting the Consul agent. The key can be set via the `encrypt` parameter: the
value of this setting is a configuration file containing the encryption key.
~> **WAN Joined Datacenters Note:** If using multiple WAN joined datacenters, be sure to use _the same encryption key_ in all datacenters.
The key must be 16-bytes, Base64 encoded. As a convenience, Consul provides the
[`consul keygen`](/docs/commands/keygen.html) command to generate a
cryptographically suitable key: