autolock
A swarm setting that encrypts the key protecting the managers’ Raft log, so a restarted manager stays locked until someone enters the unlock key.
Without the unlock key, locked managers cannot rejoin the swarm.
In more detail
Turn it on with docker swarm update --autolock=true, and unlock a manager with docker swarm unlock. Lose the key while every manager is down and the swarm cannot be recovered.
Related terms
- Docker Swarm — Docker's own container orchestrator, built into the engine, which the industry largely left behind in favour of Kubernetes.
- Raft — An agreement method that lets several copies of a database accept writes in the same order and keep working when a member fails.
Taught in
- Five Nodes Before Lunch: Building A Swarm — Docker Certified Associate (DCA) Exam Prep
- Four Questions From The Auditor: Swarm Security, Autolock And Content Trust — Docker Certified Associate (DCA) Exam Prep
- Security Sprint: Eight Questions On Defaults, Trust And Access — Docker Certified Associate (DCA) Exam Prep