| Hi Mitchell. I had to kill a rollout of Vault at one billion dollar (revenue) company for the following reasons: * the engineers doing the PoC could not/would not document how to operate it in production * the managers did not take the unsealing responsibility seriously ("I'm in mgmt., don't call me on Sundays again.") * our network was perceived as flaky. Some cheap solutions are: * provide some pre-written runbooks for administering Vault that people can cut-and-paste into their wiki * provide some diagrams and scenarios for unsealing that can be adopted * have the Vault server monitor and log network health (latency, bad packets, etc.) |