/harbormaster

harbormaster is a tool to operate a private PaaS based on CoreOS and docker

Primary LanguageShell

harbormaster

A harbormaster is an official responsible for enforcing the regulations of a particular harbour or port, in order to ensure the safety of navigation, the security of the harbour and the correct operation of the port facilities.

harbormaster is a tool to operate a private PaaS based on CoreOS and docker.

This project is in alpha stage, you should try it and discuss on IRC (#harbormaster) or the mailing list.

How it works?

harbormaster communicate with etcd to discover your cluster of CoreOS instances and manage containers operation via docker's remote API.

CoreOS configuration

To be managed by harbormaster, docker needs to listen on the host IP address (e.g. /usr/bin/docker -H 0.0.0.0:4243 -d). It should be noted that docker doesn't currently have authentication on its API so you should run your instances in an environment where the outside world can't connect directly to port 4243 and you have control over applications deployed on your PaaS.

It would also be a good idea to configure etcd with SSL client cert authentication.