DOCKER(1)
π DOCKER-SWARM-CA π
okay bestie so this is a page from the Docker User Manuals and it's all about docker swarm ca β the command that shows you your swarm's root CA and, when you're feeling spicy, rotates it. it's giving certificate glow-up energy. β¨
πΈ NAME πΈ
docker-swarm-ca β display and rotate the root CA π
π¦ SYNOPSIS π¦
docker swarm ca [OPTIONS]
β¨ DESCRIPTION β¨
display and rotate the root CA. that's it, that's the whole vibe. you can peek at your current root CA, or you can straight up swap it out for a brand new one and make the whole cluster re-do its certificates. main character behaviour, honestly. π
π OPTIONS π
--ca-cert=β path to the PEM-formatted root CA certificate you wanna use for the new cluster. like, the certificate file itself, bestie. π--ca-key=β path to the PEM-formatted root CA key for the new cluster. yes, the secret key β keep it safe, don't be posting it in the group chat. π--cert-expiry=2160h0m0sβ how long node certificates stay valid for. the duration units you can use arens,us,ms,s,m,hβ and the default is literally2160h0m0s, which is a lot of hours, no cap. β³-d,--detach[=false]β exit immediately instead of waiting for the root rotation to converge. so you just dip and let it cook in the background. defaults tofalse. πβοΈ--external-ca=β specifications of one or more certificate signing endpoints. for when the signing happens somewhere else, iykyk. π₯-q,--quiet[=false]β suppress progress output. no little dots, no updates, just silence. defaults tofalse. π€«--rotate[=false]β rotate the swarm CA! and if you don't hand it a certificate or a key, it will generate brand new ones for you. defaults tofalse. this is the big one, bestie. π«
π SEE ALSO π
docker-swarm(1)β go read that one too, it's the whole swarm situation. π
and that's the page!! fr fr. this was Docker Community's Docker User Manuals, dated Oct 2026, and the manual is literally called DOCKER(1). slay, go rotate that CA responsibly. periodt. πβ¨ππ¦
π¦ where this page comes from
- alpine 3.24: docker-doc 29.9.2-r0 Β· Apache-2.0
- fedora 43: docker-cli 29.8.2-2.fc43
- fedora 43: docker-cli 29.9.2-2.fc43 Β· Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND MIT
- fedora 44: docker-cli 29.8.2-2.fc44
- fedora 44: docker-cli 29.9.2-2.fc44 Β· Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND MIT
- opensuse-leap 16.0: docker 29.7.2_ce-160000.8.1 Β· Apache-2.0
- opensuse-leap 16.0: docker 29.7.2_ce-160000.8.1 Β· Apache-2.0
- opensuse-leap 16.0: docker 29.7.2_ce-160000.8.1 Β· Apache-2.0
- opensuse-leap 16.0: docker 29.7.2_ce-160000.8.1 Β· Apache-2.0
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms