Docker Swarm

Clustering mode built into Docker Engine, with an automatic root CA and mutually authenticated node traffic.

Provider: default
Kind: Container orchestrator
Category: Compute
Official docs: https://docs.docker.com/engine/swarm/how-swarm-mode-works/pki/

Properties · 3 set by this component

property	type	values	required	kind default	this component
autoscaling	boolean	—	no	false	▸ false
certificateRotationDays · component property	integer	—	no	90	inherited
managed	boolean	—	no	false	▸ false
mutualTls · component property	boolean	—	no	true	inherited
networkPolicy	boolean	—	no	—	inherited
nodeCount	integer	—	no	—	inherited
overlayNetworkEncryption · component property	boolean	—	no	false	inherited
privateControlPlane	boolean	—	no	—	inherited
raftManagers · component property	integer	—	no	1	inherited
rbac	boolean	—	no	—	▸ false
version	string	—	no	—	inherited

Rules that apply · 1

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

Stateful node without zone redundancyerror

stateful-node-without-zone-redundancy

A stateful compute node pinned to exactly one availability zone disappears with that zone, and its state goes with it. Nodes inside a cell are exempt, because there the cell is deliberately single-zone and redundancy comes from the other cells.

— all of these hold:
— the node's `stateless` is false
— the node sits inside exactly 1 availability-zone group
— this does not hold:
— the node sits inside at least one cell group

Use it in a design

nodes:
  - { id: "docker-swarm", component: "docker-swarm" }

Other Container orchestrator products · 35

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Docker Swarm mode, the clustering built into Docker Engine. Per "Manage swarm security with public key
3# infrastructure (PKI)" swarm init generates a root CA and every node gets a certificate, so node-to-node
4# traffic is mutually authenticated by default and certificates renew every three months.
5schemaVersion: "1"
6type: "component"
7id: "docker-swarm"
8kind: "container-orchestrator"
9provider: "default"
10docs: "https://docs.docker.com/engine/swarm/how-swarm-mode-works/pki/"
11defaults:
12  managed: false
13  autoscaling: false
14  rbac: false
15properties:
16  mutualTls:
17    type: "boolean"
18    default: true
19  certificateRotationDays:
20    type: "integer"
21    default: 90
22  overlayNetworkEncryption:
23    type: "boolean"
24    default: false
25  raftManagers:
26    type: "integer"
27    default: 1

The same page as markdown, for an agent: /catalogue/components/docker-swarm.md