Enable basic-auth

This prevents the faas-swarm service from being accessed from
functions within the overlay network.

Tested with additional changes to the faas compose file to add
the required secrets. Overhead is minimal.

Tested on Swarm cluster.

Signed-off-by: Alex Ellis (VMware) <alexellis2@gmail.com>

Gopkg.toml

@@ -16,7 +16,7 @@
 
 [[constraint]]
   name = "github.com/openfaas/faas-provider"
-  version = "0.6.0"
+  version = "0.7.1"
 
 # match docker/distribution revision with moby
 [[override]]
@@ -25,4 +25,4 @@
 
 [[override]]
   name = "github.com/moby/moby"
-  revision = "4a804016ab8b9fd55a45cff9687a1de12dee5eb7"
+  revision = "4a804016ab8b9fd55a45cff9687a1de12dee5eb7"

server.go

@@ -57,11 +57,15 @@ func main() {
 	}
 
 	bootstrapConfig := bootTypes.FaaSConfig{
-		ReadTimeout:  cfg.ReadTimeout,
-		WriteTimeout: cfg.WriteTimeout,
-		TCPPort:      &cfg.TCPPort,
-		EnableHealth: true,
+		ReadTimeout:     cfg.ReadTimeout,
+		WriteTimeout:    cfg.WriteTimeout,
+		TCPPort:         &cfg.TCPPort,
+		EnableHealth:    true,
+		EnableBasicAuth: true,
+		SecretMountPath: "/run/secrets",
 	}
 
+	log.Printf("Basic authentication: %v\n", bootstrapConfig.EnableBasicAuth)
+
 	bootstrap.Serve(&bootstrapHandlers, &bootstrapConfig)
 }