Hitless TLS Certificate Rotation in GoOne of the core security goals of Docker's Swarm mode is to be secure by default. To achieve that, when a new Swarm gets created it generates a self-signed Certificate Authority (CA) and issues short-lived[1] certificates to every node, allowing the use of Mutually Authenticated TLS for node-to-node communications. Unfortunately, and much to the annoyance of every infrastructure engineer, there is
