Swarmgate 0.7.0 – A Step Forward in Docker Swarm Multi Tenant Management

Swarmgate 0.7.0 – A Step Forward in Docker Swarm Multi Tenant Management(github.com)

2 points by ancieque 2 years ago | 1 comment

ancieque 2 years ago |

Speaking as a Co-Founder of NeuroForge here, with some exciting news: we're proud to announce a new alpha release for our project, Swarmgate - version 0.7.0. This tool, which started as a simple experiment within our team, has evolved into an essential project aimed at addressing the complex challenges of Docker Swarm management. Whether it's juggling multiple users in a single swarm or optimizing resources across various swarms, Swarmgate 0.7.0 is our latest answer to these issues, offering enhanced features and improvements. You can find it over at:

https://github.com/neuroforgede/swarmgate

What's Swarmgate? Swarmgate is our innovative Docker Socket Proxy designed to provide a tenant-specific view onto a Docker Swarm. It supports all necessary operations for deploying stacks, along with managing volumes, secrets, configs, networks, and more. This allows multiple teams to work collaboratively within the same cluster without interfering with each other, thanks to unique labels that filter requests based on resource ownership. It's about making Docker Swarm environments as efficient and user-friendly as possible.

Under the Hood:

We've built Swarmgate using Node.js and Express, with the dockerode (and docker-modem) library for Docker interaction. This technology stack ensures robust performance and seamless integration with Docker's API, providing a reliable and effective management tool.

What's New in 0.7.0?

    Docker Registry Auth Verification: Enhanced security through Docker Registry authentication checks to prevent unauthorized access to images.

    Security Enhancements: Removal of the :version/swarm endpoint to protect against potential security vulnerabilities by exposing swarm join tokens.

    Simplified Proxying: Introduction of the proxyRequestToDocker function for straightforward proxying of requests without the need for filtering.

    Resolved Log Issues: We've tackled service/tasks log parsing issues to ensure compatibility and ease of use with the Docker CLI.

A Gentle Reminder:

As enthusiastic as we are about Swarmgate 0.7.0, it's important to remember that this is still ALPHA software. It's primarily a defense against accidental disruptions within clusters. While we're diligently enhancing security features, it's advisable to use Swarmgate in environments where there's a high level of trust among users.

What's up next:

    A better tutorial on how to set this up

    More ideas from https://github.com/neuroforgede/swarmgate/issues/1

Docker Registry Auth Verification: Enhanced security through Docker Registry authentication checks to prevent unauthorized access to images. Security Enhancements: Removal of the :version/swarm endpoint to protect against potential security vulnerabilities by exposing swarm join tokens. Simplified Proxying: Introduction of the proxyRequestToDocker function for straightforward proxying of requests without the need for filtering. Resolved Log Issues: We've tackled service/tasks log parsing issues to ensure compatibility and ease of use with the Docker CLI.