To add to this, I run `consul join` against all instances tagged as consul servers with the output of the instance list, on boot, using cloud-init's "per-boot" script area.