Consul 클러스터와 Vault 클러스터의 상태를 확인하고 KV 엔진을 테스트하는 방법

Consul 클러스터와 Vault 클러스터의 상태를 확인하고 KV(Key-Value) 엔진을 테스트하는 방법

Consul 클러스터 상태 확인

노드 접속

docker compose exec -it consul-node1 /bin/sh

클러스터 멤버 확인

consul members

Node          Address          Status  Type    Build   Protocol  DC   Partition  Segment
consul-node1  172.18.0.3:8301  alive   server  1.22.1  2         dc1  default    <all>
consul-node2  172.18.0.6:8301  alive   server  1.22.1  2         dc1  default    <all>
consul-node3  172.18.0.5:8301  alive   server  1.22.1  2         dc1  default    <all>

리더(Leader) 확인

consul operator raft list-peers

Node          ID                                    Address          State     Voter  RaftProtocol  Commit Index  Trails Leader By
consul-node1  9956c830-9370-a6fb-d7b6-3046de50100e  172.18.0.3:8300  follower  true   3             496           0 commits
consul-node2  1210bef9-b83f-4e11-d99f-6fdbc0e25ab6  172.18.0.6:8300  follower  true   3             496           0 commits
consul-node3  aa442318-4b64-f30b-bdb0-b455f978f285  172.18.0.5:8300  leader    true   3             496           -

REST API로 상태 조회

• Consul API는 단순하게 클러스터 정보를 가져올 수 있습니다.

Peers 조회

curl -s http://consul-node1:8500/v1/status/peers | jq .

[
  "172.18.0.5:8300",
  "172.18.0.6:8300",
  "172.18.0.3:8300"
]

리더(Leader) 확인

curl -s http://consul-node1:8500/v1/status/leader | jq .

"172.18.0.5:8300"

Consul KV 테스트

KV 데이터 쓰기

consul kv put test/cli_key "Test Value from CLI"

Success! Data written to: test/cli_key

KV 데이터 읽기

consul kv get test/cli_key

Test Value from CLI

KV 데이터 삭제

consul kv delete test/cli_key

Success! Deleted key: test/cli_key

728x90

Vault 클러스터 상태 확인

환경 변수 설정

export VAULT_ADDR="http://vault-node1:8200"
export VAULT_TOKEN="hvs.uoDEhj6begrUpM0Gfo483yGp"

로그인

vault login hvs.uoDEhj6begrUpM0Gfo483yGp

상태 확인

vault status

Key             Value
---             -----
Seal Type       shamir
Initialized     true
Sealed          false
Total Shares    5
Threshold       3
Version         1.21.1
Build Date      2025-11-18T13:04:32Z
Storage Type    consul
Cluster Name    vault-cluster-b217408b
Cluster ID      fa23a9e4-5a65-9d62-ae71-98c7e1fd4368
HA Enabled      true
HA Cluster      https://vault-node1:8201
HA Mode         active
Active Since    2025-12-01T23:32:02.877780554+09:00

Vault KV Secret Engine 테스트(KV v2)

KV 엔진 활성화

---

KV v1 엔진 활성화

vault secrets enable kv

Success! Enabled the kv secrets engine at: kv/

curl -s \
  --header "X-Vault-Token: $VAULT_TOKEN" \
  --request GET \
  $VAULT_ADDR/v1/kv/my-application | jq .

---

vault secrets enable -path=kv kv-v2

Success! Enabled the kv-v2 secrets engine at: kv/

Secret 생성(put)

vault kv put kv/my-application \
  username="vault-user" \
  password="super-secret-password"

===== Secret Path =====
kv/data/my-application

======= Metadata =======
Key                Value
---                -----
created_time       2025-12-01T15:13:19.766147381Z
custom_metadata    <nil>
deletion_time      n/a
destroyed          false
version            1

Secret 조회(get)

vault kv get kv/my-application

===== Secret Path =====
kv/data/my-application

======= Metadata =======
Key                Value
---                -----
created_time       2025-12-01T15:13:19.766147381Z
custom_metadata    <nil>
deletion_time      n/a
destroyed          false
version            1

====== Data ======
Key         Value
---         -----
password    super-secret-password
username    vault-user

Secret 삭제(delete)

vault kv delete kv/my-application

Success! Data deleted (if it existed) at: kv/data/my-application

KV v1 REST API로 조회

curl -s \
  --header "X-Vault-Token: $VAULT_TOKEN" \
  --request GET \
  $VAULT_ADDR/v1/kv/data/my-application | jq .

{
  "request_id": "2524a6e6-3f48-ddd1-d4bc-453a348e88ad",
  "lease_id": "",
  "renewable": false,
  "lease_duration": 0,
  "data": {
    "data": {
      "password": "super-secret-password",
      "username": "vault-user"
    },
    "metadata": {
      "created_time": "2025-12-01T15:15:39.645745127Z",
      "custom_metadata": null,
      "deletion_time": "",
      "destroyed": false,
      "version": 2
    }
  },
  "wrap_info": null,
  "warnings": null,
  "auth": null,
  "mount_type": "kv"
}