3 ms·

Unfortunately Vault doesn't have a plugin yet for Docker Swarm still :(

by Axsuul 7y ago

darkwater 7y ago
But is Swarm a valuable target? My feeling is that Swarm is going to be EOL'ed in not a so distant future.
Jonnax 7y ago
Swarm is on its way out. Mirantis bought that part of Docker and they said this: "The primary orchestrator going forward is Kubernetes. Mirantis is committed to providing an excellent experience to all Docker Enterprise platform customers and currently expects to support Swarm for at least two years, depending on customer input into the roadmap. Mirantis is also evaluating options for making the transition to Kubernetes easier for Swarm users." https://www.mirantis.com/blog/mirantis-acquires-docker-enterprise-platform-business/ https://www.mirantis.com/blog/mirantis-acquires-docker-enter...
- peterwwillis 7y ago
  This is sad. Swarm is simple and effective, like Nomad but easier.
  - fapjacks 7y ago
    But there's no money in enterprise support contracts for things which are simple and effective.
    - bliteben 7y ago
      I feel like so much in the cloud space is actually getting worse because of this. Its like all the old server shufflers and netops guys have taken over.
  - notduncansmith 7y ago
    Agreed. I’ve been working a lot with Swarm over the past year and while it’s not perfect, it has been an overall great experience. I really enjoy the simplicity and tight integration with Docker, and I feel that the ecosystem around Swarm was just starting to mature. Hopefully it remains an option for a while. Also, I haven’t needed to integrate something like Vault because the Swarm secrets feature covers my use case perfectly.
    - Axsuul 7y ago
      I'm also using the secrets feature but it's very brittle. If your swarm gets destroyed or you want to migrate servers, it's a huge pain to get those secrets back up and running. Unless I'm missing a better way to do this, I'd love to know! I currently have my secrets stored in an encrypted text file in case I need to bring them back up.
      - notduncansmith 7y ago
        I do something similar, using Ansible Vault (not to be confused with Hashicorp Vault!) to store the encrypted secrets in my ops directory (separate from the application source code). They’re stored as YAML so very easy to upload/regenerate with Ansible.
- ensignavenger 7y ago
  Since Swarm is Open Source, it is possible the community will maintain it even after Mirantis/Docker have stopped developing it completely.

Unfortunately Vault doesn't have a plugin yet for Docker Swarm still :(

by Axsuul 7y ago

Unfortunately Vault doesn't have a plugin yet for Docker Swarm still :(

darkwater 7y ago

But is Swarm a valuable target? My feeling is that Swarm is going to be EOL'ed in not a so distant future.

Jonnax 7y ago

Swarm is on its way out. Mirantis bought that part of Docker and they said this: "The primary orchestrator going forward is Kubernetes. Mirantis is committed to providing an excellent experience to all Docker Enterprise platform customers and currently expects to support Swarm for at least two years, depending on customer input into the roadmap. Mirantis is also evaluating options for making the transition to Kubernetes easier for Swarm users." https://www.mirantis.com/blog/mirantis-acquires-docker-enterprise-platform-business/ https://www.mirantis.com/blog/mirantis-acquires-docker-enter...

peterwwillis 7y ago
This is sad. Swarm is simple and effective, like Nomad but easier.
- fapjacks 7y ago
  But there's no money in enterprise support contracts for things which are simple and effective.
  - bliteben 7y ago
    I feel like so much in the cloud space is actually getting worse because of this. Its like all the old server shufflers and netops guys have taken over.
- notduncansmith 7y ago
  Agreed. I’ve been working a lot with Swarm over the past year and while it’s not perfect, it has been an overall great experience. I really enjoy the simplicity and tight integration with Docker, and I feel that the ecosystem around Swarm was just starting to mature. Hopefully it remains an option for a while. Also, I haven’t needed to integrate something like Vault because the Swarm secrets feature covers my use case perfectly.
  - Axsuul 7y ago
    I'm also using the secrets feature but it's very brittle. If your swarm gets destroyed or you want to migrate servers, it's a huge pain to get those secrets back up and running. Unless I'm missing a better way to do this, I'd love to know! I currently have my secrets stored in an encrypted text file in case I need to bring them back up.
    - notduncansmith 7y ago
      I do something similar, using Ansible Vault (not to be confused with Hashicorp Vault!) to store the encrypted secrets in my ops directory (separate from the application source code). They’re stored as YAML so very easy to upload/regenerate with Ansible.
ensignavenger 7y ago
Since Swarm is Open Source, it is possible the community will maintain it even after Mirantis/Docker have stopped developing it completely.