0
1
00:00:01,200 --> 00:00:05,740
Let's see is there any way to limit Docker stack deploy such as our back in the swarm master.
1

2
00:00:05,740 --> 00:00:06,990
John that is a great question.
2

3
00:00:06,990 --> 00:00:09,050
Not out of the box when we talk about our back.
3

4
00:00:09,060 --> 00:00:17,010
Our back is role based authentication so what you're really asking is can I limit people to certain
4

5
00:00:17,010 --> 00:00:23,420
stacks or certain nodes or certain collections of things in a swarm.
5

6
00:00:23,520 --> 00:00:25,140
You get that with Docker enterprise.
6

7
00:00:25,140 --> 00:00:28,290
That's one of the enterprise features that you pay for with their paid product.
7

8
00:00:28,290 --> 00:00:30,690
You don't get that in the free open source version.
8

9
00:00:30,690 --> 00:00:40,320
However if you look up the word Docker authz a u t h z I believe that is the standard plug in model
9

10
00:00:40,320 --> 00:00:42,170
for authorization plugins.
10

11
00:00:42,180 --> 00:00:47,820
So if you go to dockor's documentation and you look up authorization plug ins you will probably find
11

12
00:00:47,880 --> 00:00:50,550
some examples of how that what they talk about there.
12

13
00:00:50,550 --> 00:00:56,280
There are also several open source versions and you can work on those and sort of create your own model
13

14
00:00:56,310 --> 00:00:59,340
for authentication like that.
14

15
00:00:59,830 --> 00:01:03,690
I have not seen anyone really go to production with their own hand rolled our back.
15

16
00:01:03,690 --> 00:01:11,200
They usually put something on top of it like Docker enterprise or partner.
16

17
00:01:11,210 --> 00:01:16,760
If you've heard of 14 or 14 or IO can do some of that so check that out.
17

18
00:01:16,760 --> 00:01:24,590
Actually that's in beta by the way if you're let's go to the browser if you go to Portainer they have
18

19
00:01:24,590 --> 00:01:27,930
a new beta that supports art by our back out of the box.
19

20
00:01:28,100 --> 00:01:33,970
And I think it's a free plugin and it's free.
20

21
00:01:33,980 --> 00:01:37,470
I mean this is open source operator so check that out.
21

22
00:01:37,490 --> 00:01:39,960
Otherwise our enterprise will be my next suggestion.