и доступны с обоих серверов. После ввода 3 ключей на слейве на мастер начинают сыпать ошибки
manager-1:~/vault# cat conf.d/vault.hcl
ui = true
disable_mlock = true
api_addr = "http://10.0.2.4:8220"
cluster_addr = "http://10.0.2.4:8201"
listener "tcp" {
address = "0.0.0.0:8220"
tls_disable = "true"
}
storage "raft" {
path = "/raft"
node = "node1"
retry_join {
leader_api_addr = "http://10.0.2.4:8220"
}
retry_join {
leader_api_addr = "http://10.0.2.5:8220"
}
retry_join {
leader_api_addr = "http://10.0.2.6:8220"
}
}
manager-2:~/vault# cat conf.d/vault.hcl
ui = true
disable_mlock = true
api_addr = "http://10.0.2.5:8220"
cluster_addr = "http://10.0.2.5:8201"
listener "tcp" {
address = "0.0.0.0:8220"
tls_disable = "true"
}
storage "raft" {
path = "/raft"
node = "node2"
retry_join {
leader_api_addr = "http://10.0.2.4:8220"
}
retry_join {
leader_api_addr = "http://10.0.2.5:8220"
}
retry_join {
leader_api_addr = "http://10.0.2.6:8220"
}
}
manager-3
......
в логах мастера
2024-08-01T14:04:59.464Z [ERROR] storage.raft: failed to appendEntries to: peer="{Nonvoter 2d6dfddf-8a18-264a-123c-4018be4d7d1c 10.0.2.5:8201}" error="dial tcp 10.0.2.5:8201: connect: connection refused"
2024-08-01T14:05:02.693Z [ERROR] storage.raft: failed to heartbeat to: peer=10.0.2.5:8201 backoff time=2.5s error="dial tcp 10.0.2.5:8201: connect: connection refused"
2024-08-01T14:05:06.092Z [ERROR] storage.raft: failed to heartbeat to: peer=10.0.2.5:8201 backoff time=2.5s error="dial tcp 10.0.2.5:8201: connect: connection refused"
2024-08-01T14:05:09.342Z [ERROR] storage.raft: failed to heartbeat to: peer=10.0.2.5:8201 backoff time=2.5s error="dial tcp 10.0.2.5:8201: connect: connection refused"
2024-08-01T14:05:09.705Z [ERROR] storage.raft: failed to appendEntries to: peer="{Nonvoter 2d6dfddf-8a18-264a-123c-4018be4d7d1c 10.0.2.5:8201}" error="dial tcp 10.0.2.5:8201: connect: connection refused"
2024-08-01T14:05:12.670Z [ERROR] storage.raft: failed to heartbeat to: peer=10.0.2.5:8201 backoff time=2.5s error="dial tcp 10.0.2.5:8201: connect: connection refused"
А ты 100% уверен, что для джойна надо стучаться на api_addr, а не на cluster_addr? Конфига под рукой нет, и доки тоже)
Да, он через апи устанавливает соединение
У тебя адреса не в блоке листенера
Обсуждают сегодня