mirror of
https://github.com/docker/docs.git
synced 2026-04-01 16:58:54 +07:00
3661b6e63b
This adds TLS support into the KV store for swarm. The manage, join,
and list commands all have a new CLI argument, matching the docker engine
discovery backend. This required adding the tlsconfig utility
package from docker engine.
Here's an example showing re-use of the cluster certs for the KV store:
swarm manage --tlsverify \
--tlscacert /etc/docker/ssl/ca.pem
--tlscert /etc/docker/ssl/cert.pem
--tlskey /etc/docker/ssl/key.pem
--discovery-opt kv.cacertfile=/etc/docker/ssl/ca.pem
--discovery-opt kv.certfile=/etc/docker/ssl/cert.pem
--discovery-opt kv.keyfile=/etc/docker/ssl/key.pem
--advertise 192.168.122.47:3376
etcd://192.168.122.47:2379
Signed-off-by: Daniel Hiltgen <daniel.hiltgen@docker.com>
43 lines
914 B
Go
43 lines
914 B
Go
package cli
|
|
|
|
import "github.com/codegangsta/cli"
|
|
|
|
var (
|
|
commands = []cli.Command{
|
|
{
|
|
Name: "create",
|
|
ShortName: "c",
|
|
Usage: "Create a cluster",
|
|
Action: create,
|
|
},
|
|
{
|
|
Name: "list",
|
|
ShortName: "l",
|
|
Usage: "List nodes in a cluster",
|
|
Flags: []cli.Flag{flTimeout, flDiscoveryOpt},
|
|
Action: list,
|
|
},
|
|
{
|
|
Name: "manage",
|
|
ShortName: "m",
|
|
Usage: "Manage a docker cluster",
|
|
Flags: []cli.Flag{
|
|
flStrategy, flFilter,
|
|
flHosts,
|
|
flLeaderElection, flLeaderTTL, flManageAdvertise,
|
|
flTLS, flTLSCaCert, flTLSCert, flTLSKey, flTLSVerify,
|
|
flHeartBeat,
|
|
flEnableCors,
|
|
flCluster, flDiscoveryOpt, flClusterOpt},
|
|
Action: manage,
|
|
},
|
|
{
|
|
Name: "join",
|
|
ShortName: "j",
|
|
Usage: "join a docker cluster",
|
|
Flags: []cli.Flag{flJoinAdvertise, flHeartBeat, flTTL, flDiscoveryOpt},
|
|
Action: join,
|
|
},
|
|
}
|
|
)
|