无法在Swarm上使用Auth构建MongoDB replcaset

无法在Swarm上使用Auth构建MongoDB replcaset,mongodb,docker,docker-swarm,replicaset,Mongodb,Docker,Docker Swarm,Replicaset,我正在尝试在docker swarm上创建一个具有身份验证的MongoDB集群。 (我的进程在禁用身份验证时工作) 因此,我有3个mongo实例(从选项--auth--replicaset replicaset\u NAME开始)位于同一加密覆盖网络上。(mongo1、mongo2和mongo3) 在使用mongo1容器的节点上,我启动replicaset并创建db admin docker exec -ti $(docker ps -f "name=mongo1" -q) mongo >

我正在尝试在docker swarm上创建一个具有身份验证的MongoDB集群。 (我的进程在禁用身份验证时工作)

因此,我有3个mongo实例(从选项
--auth--replicaset replicaset\u NAME
开始)位于同一加密覆盖网络上。(mongo1、mongo2和mongo3)

在使用mongo1容器的节点上,我启动replicaset并创建db admin

docker exec -ti $(docker ps -f "name=mongo1" -q) mongo
> rs.initiate()
{
        "info2" : "no configuration specified. Using a default configuration for the set",
        "me" : "84ab8d1609c8:27017",
        "ok" : 1
}
REPLICASET_NAME:SECONDARY> use admin
switched to db admin
REPLICASET_NAME:PRIMARY> db.createUser({ user: "myUserAdmin", pwd: "123456", roles: [ { role: "userAdminAnyDatabase", db: "admin" } ]})
Successfully added user: {
        "user" : "myUserAdmin",
        "roles" : [
                {
                        "role" : "userAdminAnyDatabase",
                        "db" : "admin"
                }
        ]
}
REPLICASET_NAME:PRIMARY> exit
之后,我创建clusterAdmin

docker exec -ti $(docker ps -f "name=mongo1" -q) mongo -u myUserAdmin --authenticationDatabase "admin" -p
MongoDB shell version v3.4.1
Enter password:
connecting to: mongodb://127.0.0.1:27017/admin
MongoDB server version: 3.4.1
REPLICASET_NAME:PRIMARY> db.createUser({user: "myClusterAdmin", pwd: "123456", roles: [ { role: "clusterAdmin", db: "admin" } ]})
Successfully added user: {
        "user" : "myClusterAdmin",
        "roles" : [
                {
                        "role" : "clusterAdmin",
                        "db" : "admin"
                }
        ]
}
REPLICASET_NAME:PRIMARY> exit
现在,当我使用clusterAdmin添加replicaset成员时,出现了一个错误

docker exec -ti $(docker ps -f "name=mongo1" -q) mongo -u myClusterAdmin -p
MongoDB shell version v3.4.1
Enter password:
connecting to: mongodb://127.0.0.1:27017
MongoDB server version: 3.4.1
REPLICASET_NAME:PRIMARY>rs.add("mongo2")
{
    "ok" : 0,
    "errmsg" : "Quorum check failed because not enough voting nodes responded; required 2 but only the following 1 voting nodes responded: c4fe398cc7b8:27017;
the following nodes did not respond affirmatively: mongo2:27017 failed with not authorized on admin to execute command { replSetHeartbeat: \"REPLICASET_NAME\", pv:
1, v: 2, from: \"c4fe398cc7b8:27017\", fromId: 0, checkEmpty: false }",
    "code" : 74,
    "codeName" : "NodeNotFound"
}
所以我有一个“NodeNotFound”错误,但我可以从mongo1 ping mongo2,mongo2会响应

docker exec -ti $(docker ps -f "name=mongo1" -q) mongo --host mongo2 -u myUserAdmin  -p
MongoDB shell version v3.4.1
Enter password:
connecting to: mongodb://mongo2:27017/
MongoDB server version: 3.4.1
2017-01-12T16:09:34.043+0000 E QUERY    [main] Error: Authentication failed. :
DB.prototype._authOrThrow@src/mongo/shell/db.js:1459:20
@(auth):6:1
@(auth):1:2
exception: login failed
你知道为什么它不起作用吗? 我做了些蠢事:p


提前感谢您的帮助;)

所以我找到了一个解决办法。 我只是使用一个密钥文件来验证每个mongo节点。

但这是无用的,因为swarm创建了加密的网络覆盖