Add note about node IPs and certs (#216)

This commit is contained in:
Jim Galasyn 2017-08-11 14:06:13 -07:00
parent e9cd784732
commit 636ebdbbe6
1 changed files with 18 additions and 1 deletions

View File

@ -55,6 +55,23 @@ If you deployed Docker Trusted Registry, you'll also need to reconfigure it
to trust the new UCP TLS certificates.
[Learn how to configure DTR](/datacenter/dtr/2.3/reference/cli/reconfigure.md).
## Certificates and compose
For compose to work correctly in the UCP web UI, when you upload your own
certificates, they must contain the IP addresses of the swarm's nodes, as SANs.
Get the IP addresses by using the `docker node inspect` command.
[Learn to add SANs to swarm certificates](add-sans-to-cluster.md).
If you have stable host names, you can join your nodes by specifying the
`--advertise-addr` option:
```bash
docker swarm join ... --advertise-addr node1.com
```
In this example, the `docker node inspect` command reports `node1.com`, instead
of the IP address.
## Where to go next
* [Access UCP from the CLI](../../user/access-ucp/cli-based-access.md)
* [Access UCP from the CLI](../../user/access-ucp/cli-based-access.md)