Docker Security Operations- Docker Swarm Configuration
Perform the following for docker swarm configuration:
-
Enable swarm mode only if needed.
-
Create a minimum number of manager nodes in a swarm.
-
Bind swarm services are bound to a specific host interface.
-
Encrypt containers data exchange on different overlay network nodes.
-
Manage secrets in a Swarm cluster with Docker's secret management commands.
-
Run swarm manager in auto-lock mode.
-
Rotate swarm manager auto-lock key periodically.
-
Rotate node and CA certificates as needed.
-
Separate management plane traffic from data plane traffic.