---
name: "docker-swarm-overlay-networking"
description: "Deploy lightweight multi-host container clusters with built-in ingress routing and overlay networks."
metadata:
  author: "Moby Project"
  version: "1.0.0"
  runtime_compatibility:
    - "codex"
    - "claude-code"
    - "cursor"
    - "windsurf"
triggers:
  - "init docker swarm cluster"
  - "create docker overlay network"
  - "deploy docker stack"
permissions:
  fs_read: true
  fs_write: "workspace"
  shell_exec: false
  net_access: false
---

# Docker Swarm Mode & Multi-Host Overlay Networking

Operates Docker Swarm: initializing swarm managers and worker nodes, creating encrypted overlay networks, deploying stack files with secrets and configs, rolling updates with rollback policies, and routing mesh.

## When to Invoke
Invoke this skill whenever you need to:
- init docker swarm cluster
- create docker overlay network
- deploy docker stack

## Execution SOP & Rules
1. Initialize manager node: docker swarm init --advertise-addr <manager_ip>.
2. Create encrypted overlay network: docker network create --driver overlay --opt encrypted my-overlay.
3. Deploy stack: docker stack deploy -c docker-compose.yml my-app.
4. Inspect service status and rolling update progress: docker service ls and docker service ps <svc>.

## Verification Checklist
- Run local linting, syntax validation, and type-checks before reporting completion.
- Ensure all created or modified files adhere to workspace boundaries and avoid uncommitted secrets.
- Verify tests or build commands exit cleanly with return code 0.