Add ELK stack example to UCP logging

Update docker/dtr image reference

Signed-off-by: Victoria Bialas <victoria.bialas@docker.com>

Update 3_prepare_the_app.md with missing dots

…in-machine-docs

incorporated Misty's rewrite from pr#256 with additional info

Signed-off-by: Victoria Bialas <victoria.bialas@docker.com>

added beta 29 release notes for mac and win

Corrected the uninstall command to make it copypasteable (it was missing a \ at the end of the volume argument) and also updated the expected output to include the WARN messages that will appear. Also corrected ordered list numbering (cosmetic only while editing)

Add doc for firewall auto-detection

Signed-off-by: LRubin <lrubin@docker.com>

Signed-off-by: LRubin <lrubin@docker.com>

Signed-off-by: Victoria Bialas <victoria.bialas@docker.com>

update autotest descriptions

finishing touches on Wordpress example in Compose docs per pr#129

Docker Cloud: update tag mapping label, some typo fixes

Signed-off-by: LRubin <lrubin@docker.com>

…ne AWS driver"

Docker Cloud: updates for multiple email address management

Revert "Doc change to support custom userdata option for docker-machine AWS driver"

Changing note format back to the way it was to match the rest of the notes in this section.

Added a filename above the custom script to distinguish it from the wait-for-it.sh script.

Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>

Signed-off-by: Misty Stanley-Jones <misty@docker.com>

…ou install

Signed-off-by: Victoria Bialas <victoria.bialas@docker.com>

Use single term for key-value store.  Fix a couple minor grammar issues.  Add documentation link to supported key-value stores.

Add info about using native Docker on win10 and 2016

Soon, versioned docs are coming back to subdirectories; making sure they aren't indexed.

Add missing whitespace

Use the correct service name when linking

Minor wording & grammar fixes to deploy-infra.md.

compose/startup-order.md -- added clarification

Updated uninstall.md

Signed-off-by: Brian Goff <cpuguy83@gmail.com>

Add release notes for 1.12.3-cs3

Signed-off-by: Brian Goff <cpuguy83@gmail.com>

fix version typo

Remove line numbers from caps link

Fix spelling in Getting started, step two

Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>

Add dirty COW security event

Correct device name should be `docker-thinpool` instead of
`docker-thinpool-tpool`

Signed-off-by: Zhang Wei <zhangwei555@huawei.com>

Typo "note"

I've added in the '--rm' argument to the 'script method' and to the 'add your user to docker group' examples to match the first instruction. Purely a consistency thing, and so new users can appreciate not having a few hello-world containers spawned. Ta.

Signed-off-by: Adrien Duermael <adrien@duermael.com>

Signed-off-by: LRubin <lrubin@docker.com>

Add alias to fix #388

Adding alias to Fix #391

Fix incorrect devicemapper thinpool device name

updates per @dsheets comments

Signed-off-by: Victoria Bialas <victoria.bialas@docker.com>

copyedits per @dsheets

Signed-off-by: Victoria Bialas <victoria.bialas@docker.com>

Fix OSX entries to MacOS in TOC

Fix quotes on webhook JSON example

added explanation of performance issues on osxfs from @dsheets post

Update centos.md

removed menu.md files

Alphabetize daemon config file options

Signed-off-by: Victoria Bialas <victoria.bialas@docker.com>

fixed an on-page link

Signed-off-by: Adrien Duermael <adrien@duermael.com>

Still iterating, but fleshed out enough for review comments.

We'll use two isolated root certificates to allow access
control between orca and swarm.

Bring it more-or-less back in sync with the current bootstrapper code.

This likely still needs some tuning/tweaking, but may be helpful
as we start to do more scale/performance testing of the system.

It turns out that our support dump logic is *really* fast and compact.
Even on a large node (hundreds of containers and thousands of images)
it runs in ~10 seconds and weighs in at a few hundred K.  Since we're
running all the dumps in parallel, there's really no need for the added
complexity of saving them to a DB.

This change revamps and simplifies the support dump API.  Now you simply
POST to the API endpoint, and it will stream the full zip file containing
all the nodes payloads within.  If a node is unreachable, times out,
or has some other catastrophic problem, the contents for that node will
be an error message instead of the normal tar.gz bundle.

I've tested this with a swarm of multiple nodes, confirmed the dumps
match up to the hosts, and the system handles offline nodes, reporting
an error message within the bundle.  (it does take a long time in the
failure cases due to a bug in swarm that's slated to be fixed in 1.9,
but curl doesn't give up so this still works fine.)

This adds an env flag to toggle behavior on copying vs pulling
standard images, as well as fixing paths for volume based deployments.

Updating with comments. Adding in the graphics
Tweaking image links

Signed-off-by: Mary Anthony <mary@docker.com>

Signed-off-by: Mary Anthony <mary@docker.com>

Signed-off-by: Mary Anthony <mary@docker.com>

This is still theoretical as the required PRs have not yet merged,
but this is how it *should* work once everything gets merged in.

Signed-off-by: Mary Anthony <mary@docker.com>

We may have scenarios where we need to show users how to mitigate problems
by accessing the KV store directly.  This short doc shows how they can
do it with admin bundles.

This change re-wires the way we have CFSSL hooked up so
that it requires mutual TLS to access the service.

Instead of using command line arguments, and thus relying on environment
variables from linking, this change also switches to registering the
CAs via KV store entries.

The current CFSSL implementation does not support mutual TLS natively,
so I've leveraged socat and a proxy container (much like we do for
docker) in the interest of expediency.  (so under the covers it's still
a link between cfss and the proxy.) Once upstream supports mutual TLS
(or if we decide to fork/patch it) we can drop the proxy and eliminate
all the links.

This makes the necessary changes in the Orca server to enable
HA deployments.

This revamps the product and image names.  After merging this change,
the bootstrapper image will be known as "dockerorca/ucp" since it is the
primary image customers interact with.  The controller will be known as
"dockerorca/ucp-controller" and the corresponding container names are
"ucp" and "ucp-controller".  Once we get closer to GA, we'll move the
images under the "docker" org, so the product name will flow nicely from
that "docker/ucp" for the bootstrapping tool, and "docker/ucp-controller"
for the server image.

This wires Orca up to support remote syslog endpoints.
The configuration is driven through the KV store, and
requires manually running curl commands (we can add UI/API
for this later.)

This also lays the foundation for a general watching facility for
configuration.  In a subsequent change I'll update this to address other
global configuration for the daemon.