mirror of
https://github.com/hashicorp/vault.git
synced 2025-08-22 23:21:08 +02:00
0660ea6fac
* Update README Let contributors know that docs will now be located in UDR * Add comments to each mdx doc Comment has been added to all mdx docs that are not partials * chore: added changelog changelog check failure * wip: removed changelog * Fix content errors * Doc spacing * Update website/content/docs/deploy/kubernetes/vso/helm.mdx Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com> --------- Co-authored-by: jonathanfrappier <92055993+jonathanfrappier@users.noreply.github.com> Co-authored-by: Tu Nguyen <im2nguyen@users.noreply.github.com>
53 lines
2.7 KiB
Plaintext
53 lines
2.7 KiB
Plaintext
---
|
|
layout: docs
|
|
page_title: Vault Enterprise cluster design
|
|
description: >-
|
|
Instructions and best practices for cluster design with Vault Enterprise.
|
|
---
|
|
|
|
> [!IMPORTANT]
|
|
> **Documentation Update:** Product documentation, which were located in this repository under `/website`, are now located in [`hashicorp/web-unified-docs`](https://github.com/hashicorp/web-unified-docs), colocated with all other product documentation. Contributions to this content should be done in the `web-unified-docs` repo, and not this one. Changes made to `/website` content in this repo will not be reflected on the developer.hashicorp.com website.
|
|
|
|
# Design your Vault Enterprise cluster
|
|
|
|
@include 'alerts/enterprise-only.mdx'
|
|
|
|
If you want to implement a robust Vault cluster, you need to understand how
|
|
Vault manages clusters, storage, and replication.
|
|
|
|
## Before you start
|
|
|
|
- **Complete the [HashiCorp Enterprise Academy Onboarding](https://onboarding.hashicorp.com/trainings) for Vault**.
|
|
- **Watch the [Raft consensus demo](https://thesecretlivesofdata.com/raft/) demo**.
|
|
|
|
## Step 1: Plan your cluster architecture
|
|
|
|
1. Review the [Integrated storage](/vault/docs/concepts/integrated-storage)
|
|
overview to learn the basics about Vault integrated storage.
|
|
1. Review the [Vault multi-cluster architecture guide](/well-architected-framework/zero-trust-security/multi-cluster-architecture)
|
|
to learn the best practices for running multiple Vault clusters.
|
|
1. Review the [Vault Enterprise replication overview](/vault/docs/enterprise/replication)
|
|
to learn the differences between performance replication and disaster
|
|
recovery replication.
|
|
1. Review the [Vault with integrated storage reference architecture](/well-architected-framework/zero-trust-security/raft-reference-architecture)
|
|
guide to learn the best practices for using Vault integrated storage
|
|
in a zero-trust security posture.
|
|
|
|
## Step 2: Review anti-patterns for Vault configuration
|
|
|
|
You can help keep your Vault environments healthy by avoiding established
|
|
anti-patterns.
|
|
|
|
The Hashicorp Well-architected framework documentation provides in-depth
|
|
[Vault anti-patterns](/well-architected-framework/operational-excellence/security-vault-anti-patterns) guidance based on
|
|
lessons learned by customers operating Vault in the field.
|
|
|
|
## Step 3: Plan for maintenance at scale
|
|
|
|
The easiest way to run Vault at scale is to manage Vault programmatically with
|
|
Terraform and Sentinel.
|
|
|
|
1. Review the [Terraform intro](/terraform/intro).
|
|
1. Review the [Programmatic best practices](/vault/docs/configuration/programmatic-best-practices)
|
|
guide to learn about managing Vault through Terraform.
|
|
1. Review the [Vault namespaces recommendations](/vault/tutorials/enterprise/namespace-structure#use-namespaces-sparingly). |