2020-01-18 00:18:09 +00:00
|
|
|
---
|
|
|
|
|
layout: guides
|
|
|
|
|
page_title: Vault Operations - Guides
|
|
|
|
|
description: |-
|
|
|
|
|
Vault architecture guide covers Vault infrastructure discussions including
|
|
|
|
|
installation.
|
|
|
|
|
---
|
|
|
|
|
|
|
|
|
|
# Vault Operations
|
|
|
|
|
|
|
|
|
|
Vault Operations guides address Vault infrastructure discussions. These
|
|
|
|
|
guides are designed to help the operations team to plan and install a Vault
|
|
|
|
|
cluster that meets your organization's needs.
|
|
|
|
|
|
2020-01-22 20:05:41 +00:00
|
|
|
- [Vault Reference Architecture](/guides/operations/reference-architecture)
|
2020-01-18 00:18:09 +00:00
|
|
|
guide provides guidance in the best practices of _Vault Enterprise_ implementations
|
|
|
|
|
through use of a reference architecture. This example is to convey a general
|
|
|
|
|
architecture, which is likely to be adapted to accommodate the specific needs of
|
|
|
|
|
each implementation.
|
|
|
|
|
|
2020-01-22 20:05:41 +00:00
|
|
|
- [Vault Deployment Guide](/guides/operations/deployment-guide) covers the
|
2020-01-18 00:18:09 +00:00
|
|
|
steps required to install and configure a single HashiCorp Vault cluster as
|
|
|
|
|
defined in the Vault Reference Architecture.
|
|
|
|
|
|
2020-01-22 20:05:41 +00:00
|
|
|
- [Vault HA with Consul](/guides/operations/vault-ha-consul) guide
|
2020-01-18 00:18:09 +00:00
|
|
|
walks you through a simple Vault HA cluster implementation which is backed by
|
2020-01-22 20:05:41 +00:00
|
|
|
[HashiCorp Consul](https://www.consul.io/intro/index).
|
2020-01-18 00:18:09 +00:00
|
|
|
|
2020-01-22 20:05:41 +00:00
|
|
|
- [Production Hardening](/guides/operations/production) guide provides
|
2020-01-18 00:18:09 +00:00
|
|
|
guidance on best practices for a production hardened deployment of Vault.
|
2020-01-22 20:05:41 +00:00
|
|
|
The recommendations are based on the [security model](/docs/internals/security)
|
2020-01-18 00:18:09 +00:00
|
|
|
and focus on defense in depth.
|
|
|
|
|
|
2020-01-22 20:05:41 +00:00
|
|
|
- [Root Token Generation](/guides/operations/generate-root) guide
|
2020-01-18 00:18:09 +00:00
|
|
|
demonstrates the workflow of regenerating root tokens. It is considered to be a
|
|
|
|
|
best practice not to persist the initial **root** token. If a root token needs
|
|
|
|
|
to be regenerated, this guide helps you walk through the task.
|
|
|
|
|
|
2020-01-22 20:05:41 +00:00
|
|
|
- [Rekeying & Rotating](/guides/operations/rekeying-and-rotating) guide
|
2020-01-18 00:18:09 +00:00
|
|
|
provides a high-level overview of Shamir's Secret Sharing Algorithm, and how to
|
|
|
|
|
perform _rekey_ and _rotate_ operations in Vault.
|
|
|
|
|
|
2020-01-22 20:05:41 +00:00
|
|
|
- [Building Plugin Backends](/guides/operations/plugin-backends) guide
|
2020-01-18 00:18:09 +00:00
|
|
|
provides steps to build, register, and mount non-database external plugin
|
|
|
|
|
backends.
|
|
|
|
|
|
|
|
|
|
## Vault Enterprise
|
|
|
|
|
|
2020-01-22 20:05:41 +00:00
|
|
|
- [Replication Setup & Guidance](/guides/operations/replication)
|
2020-01-18 00:18:09 +00:00
|
|
|
walks you through the commands to activate the Vault servers in replication mode.
|
2020-03-31 19:21:16 +00:00
|
|
|
Please note that [Vault Replication](/docs/enterprise/replication)
|
2020-01-18 00:18:09 +00:00
|
|
|
is a Vault Enterprise feature.
|
|
|
|
|
|
2020-01-22 20:05:41 +00:00
|
|
|
- [Disaster Recovery Replication Setup](/guides/operations/disaster-recovery)
|
2020-01-18 00:18:09 +00:00
|
|
|
guide provides step-by-step instruction of setting up a disaster recovery (DR)
|
|
|
|
|
cluster.
|
|
|
|
|
|
2020-01-22 20:05:41 +00:00
|
|
|
- [Mount Filter](/guides/operations/mount-filter)
|
2020-01-18 00:18:09 +00:00
|
|
|
guide demonstrates how to selectively filter out secret engines from being
|
|
|
|
|
replicated across clusters. This feature can help organizations to comply with
|
|
|
|
|
**_General Data Protection Regulation (GDPR)_**.
|
|
|
|
|
|
2020-01-22 20:05:41 +00:00
|
|
|
- [Performance Standby Nodes](/guides/operations/performance-nodes) guide
|
2020-01-18 00:18:09 +00:00
|
|
|
describes how Vault HA works with performance standby nodes.
|
|
|
|
|
|
2020-01-22 20:05:41 +00:00
|
|
|
- [Multi-Tenant Pattern with Namespaces](/guides/operations/multi-tenant)
|
2020-01-18 00:18:09 +00:00
|
|
|
guide discuss a pattern to isolate secrets using ACL Namespaces.
|
|
|
|
|
|
2020-01-22 20:05:41 +00:00
|
|
|
- [Vault Auto-unseal using AWS Key Management Service (KMS)](/guides/operations/autounseal-aws-kms) guide demonstrates an example of
|
2020-01-18 00:18:09 +00:00
|
|
|
how to use Terraform to provision an instance that utilizes an encryption key
|
|
|
|
|
from AWS Key Management Service (KMS).
|
|
|
|
|
|
2020-01-22 20:05:41 +00:00
|
|
|
- [Seal Wrap / FIPS 140-2](/guides/operations/seal-wrap)
|
2020-01-18 00:18:09 +00:00
|
|
|
guide demonstrates how Vault's seal wrap feature works to encrypt your secrets
|
|
|
|
|
leveraging FIPS 140-2 certified HSM.
|
|
|
|
|
|
2020-01-22 20:05:41 +00:00
|
|
|
- [Vault Cluster Monitoring Guide](/guides/operations/monitoring) walks
|
2020-01-18 00:18:09 +00:00
|
|
|
you through Vault cluster monitoring with telemetry collected by
|
|
|
|
|
[Telegraf](https://www.influxdata.com/time-series-platform/telegraf/) and
|
|
|
|
|
forwarded to
|
|
|
|
|
[InfluxDB](https://www.influxdata.com/time-series-platform/influxdb/) and
|
|
|
|
|
[Grafana](https://grafana.com/) for analysis.
|
