mirror of
https://github.com/moby/moby.git
synced 2022-11-09 12:21:53 -05:00
2cc5bd33ee
Implement the proposal from https://github.com/docker/docker/issues/24430#issuecomment-233100121 Removes acceptance policy and secret in favor of an automatically generated join token that combines the secret, CA hash, and manager/worker role into a single opaque string. Adds a docker swarm join-token subcommand to inspect and rotate the tokens. Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
60 lines
1.5 KiB
Go
60 lines
1.5 KiB
Go
package node
|
|
|
|
import (
|
|
"fmt"
|
|
"strings"
|
|
|
|
"github.com/docker/docker/opts"
|
|
runconfigopts "github.com/docker/docker/runconfig/opts"
|
|
"github.com/docker/engine-api/types/swarm"
|
|
)
|
|
|
|
type nodeOptions struct {
|
|
annotations
|
|
role string
|
|
availability string
|
|
}
|
|
|
|
type annotations struct {
|
|
name string
|
|
labels opts.ListOpts
|
|
}
|
|
|
|
func newNodeOptions() *nodeOptions {
|
|
return &nodeOptions{
|
|
annotations: annotations{
|
|
labels: opts.NewListOpts(nil),
|
|
},
|
|
}
|
|
}
|
|
|
|
func (opts *nodeOptions) ToNodeSpec() (swarm.NodeSpec, error) {
|
|
var spec swarm.NodeSpec
|
|
|
|
spec.Annotations.Name = opts.annotations.name
|
|
spec.Annotations.Labels = runconfigopts.ConvertKVStringsToMap(opts.annotations.labels.GetAll())
|
|
|
|
switch swarm.NodeRole(strings.ToLower(opts.role)) {
|
|
case swarm.NodeRoleWorker:
|
|
spec.Role = swarm.NodeRoleWorker
|
|
case swarm.NodeRoleManager:
|
|
spec.Role = swarm.NodeRoleManager
|
|
case "":
|
|
default:
|
|
return swarm.NodeSpec{}, fmt.Errorf("invalid role %q, only worker and manager are supported", opts.role)
|
|
}
|
|
|
|
switch swarm.NodeAvailability(strings.ToLower(opts.availability)) {
|
|
case swarm.NodeAvailabilityActive:
|
|
spec.Availability = swarm.NodeAvailabilityActive
|
|
case swarm.NodeAvailabilityPause:
|
|
spec.Availability = swarm.NodeAvailabilityPause
|
|
case swarm.NodeAvailabilityDrain:
|
|
spec.Availability = swarm.NodeAvailabilityDrain
|
|
case "":
|
|
default:
|
|
return swarm.NodeSpec{}, fmt.Errorf("invalid availability %q, only active, pause and drain are supported", opts.availability)
|
|
}
|
|
|
|
return spec, nil
|
|
}
|