DOCKER(1)

πŸ’– DOCKER-SWARM-CA πŸ’–

okay bestie so this is a page from the Docker User Manuals and it's all about docker swarm ca β€” the command that shows you your swarm's root CA and, when you're feeling spicy, rotates it. it's giving certificate glow-up energy. ✨


🌸 NAME 🌸

docker-swarm-ca β€” display and rotate the root CA πŸ‘‘


πŸ¦‹ SYNOPSIS πŸ¦‹

docker swarm ca [OPTIONS]

✨ DESCRIPTION ✨

display and rotate the root CA. that's it, that's the whole vibe. you can peek at your current root CA, or you can straight up swap it out for a brand new one and make the whole cluster re-do its certificates. main character behaviour, honestly. πŸ’…


πŸŽ€ OPTIONS πŸŽ€

  • --ca-cert= β€” path to the PEM-formatted root CA certificate you wanna use for the new cluster. like, the certificate file itself, bestie. 🌈
  • --ca-key= β€” path to the PEM-formatted root CA key for the new cluster. yes, the secret key β€” keep it safe, don't be posting it in the group chat. πŸ™ˆ
  • --cert-expiry=2160h0m0s β€” how long node certificates stay valid for. the duration units you can use are ns, us, ms, s, m, h β€” and the default is literally 2160h0m0s, which is a lot of hours, no cap. ⏳
  • -d, --detach[=false] β€” exit immediately instead of waiting for the root rotation to converge. so you just dip and let it cook in the background. defaults to false. πŸƒβ™€οΈ
  • --external-ca= β€” specifications of one or more certificate signing endpoints. for when the signing happens somewhere else, iykyk. πŸ”₯
  • -q, --quiet[=false] β€” suppress progress output. no little dots, no updates, just silence. defaults to false. 🀫
  • --rotate[=false] β€” rotate the swarm CA! and if you don't hand it a certificate or a key, it will generate brand new ones for you. defaults to false. this is the big one, bestie. πŸ’«

πŸ‘‘ SEE ALSO πŸ‘‘

  • docker-swarm(1) β€” go read that one too, it's the whole swarm situation. 🐝

and that's the page!! fr fr. this was Docker Community's Docker User Manuals, dated Oct 2026, and the manual is literally called DOCKER(1). slay, go rotate that CA responsibly. periodt. πŸ’–βœ¨πŸŽ€πŸ¦‹

πŸ“¦ where this page comes from