docker
/
docs
mirror of https://github.com/docker/docs.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1455 from DawnWood-Docker/landing-page 

[wip]separate enterprise docs from community docs
This commit is contained in:
Dawn-Docker Enterprise 2019-12-13 12:42:03 -08:00 committed by GitHub
parent 72f605c8c8 ca23efde3f
commit 1c5c1f85ab
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with 213 additions and 95 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

96
_data/toc.yaml
View File

@ -4,7 +4,7 @@ horizontalnav:
path: / path: /
node: guides node: guides
- title: Product manuals - title: Product manuals
path: /manuals/ path: /install/
node: manuals node: manuals
- title: Glossary - title: Glossary
path: /glossary/ path: /glossary/
@ -24,8 +24,6 @@ guides:
section: section:
- sectiontitle: Docker Engine - Community - sectiontitle: Docker Engine - Community
section: section:
- title: Docker Engine - Community
path: /install/
- sectiontitle: Cloud - sectiontitle: Cloud
section: section:
- sectiontitle: Docker for AWS - sectiontitle: Docker for AWS
@ -88,18 +86,6 @@ guides:
title: Binaries title: Binaries
- path: /install/linux/linux-postinstall/ - path: /install/linux/linux-postinstall/
title: Optional Linux post-installation steps title: Optional Linux post-installation steps
- sectiontitle: Compatibility between Docker versions
section:
- path: /engine/ce-ee-node-activate/
title: Docker Engine Community to Enterprise Node Activate
- path: /engine/migration/
title: Migrate to Docker 1.10
- path: /engine/breaking_changes/
title: Breaking changes
- path: /engine/deprecated/
title: Deprecated Docker features
- path: /engine/faq/
title: FAQ
- sectiontitle: Get started - sectiontitle: Get started
section: section:
- path: /engine/docker-overview/ - path: /engine/docker-overview/
@ -394,40 +380,6 @@ guides:
path: /engine/extend/config/ path: /engine/extend/config/
- path: /engine/extend/plugin_api/ - path: /engine/extend/plugin_api/
title: Plugins API title: Plugins API
- sectiontitle: Standards and compliance
section:
- path: /compliance/
title: Docker standards and compliance
- sectiontitle: NIST
section:
- path: /compliance/nist/800_37/
title: NIST SP 800-37 (RMF)
- path: /compliance/nist/800_53/
title: NIST SP 800-53
- path: /compliance/nist/800_190/
title: NIST SP 800-190
- path: /compliance/nist/fips140_2/
title: FIPS 140-2
- path: /compliance/nist/nistir_8176/
title: NISTIR 8176
- path: /compliance/nist/itl_october2017/
title: NIST ITL Bulletin October 2017
- sectiontitle: OSCAL
section:
- path: /compliance/oscal/
title: OSCAL compliance guidance
- sectiontitle: CIS Benchmarks
section:
- path: /compliance/cis/docker_ee/
title: Docker Enterprise Benchmark
- path: /compliance/cis/docker_ce/
title: Docker Engine - Community Benchmark
- path: /compliance/cis/k8s/
title: Kubernetes Benchmark
- path: /compliance/fedramp/
title: FedRAMP
- path: /compliance/fisma/
title: FISMA
- sectiontitle: Open source at Docker - sectiontitle: Open source at Docker
section: section:
- path: /opensource/ - path: /opensource/
@ -1257,6 +1209,8 @@ samples:
title: Library references title: Library references
manuals: manuals:
- path: /install/
title: Docker Engine - Community
- sectiontitle: Docker Assemble - sectiontitle: Docker Assemble
section: section:
- path: /assemble/install/ - path: /assemble/install/
@ -1692,10 +1646,10 @@ manuals:
enterprise: enterprise:
- sectiontitle: Docker Enterprise - sectiontitle: Docker Enterprise
section: section:
- path: /ee/overview/ - path: /ee/
title: Overview title: Docker Enterprise
- path: /ee/release-notes/ - path: /ee/release-notes/
title: Release notes title: Install or upgrade
- path: /ee/licensing/ - path: /ee/licensing/
title: Licensing title: Licensing
- sectiontitle: Docker Cluster - sectiontitle: Docker Cluster
@ -4196,7 +4150,7 @@ enterprise:
title: Manage usage data collection title: Manage usage data collection
- title: Get support - title: Get support
path: /ee/get-support/ path: /ee/get-support/
- title: DTR API - title: DTR API (swagger)
path: /reference/dtr/2.7/api/ path: /reference/dtr/2.7/api/
- sectiontitle: DTR CLI - sectiontitle: DTR CLI
section: section:
@ -4220,7 +4174,7 @@ enterprise:
title: restore title: restore
- path: /reference/dtr/2.7/cli/upgrade/ - path: /reference/dtr/2.7/cli/upgrade/
title: upgrade title: upgrade
- title: UCP API - title: UCP API (swagger)
path: /reference/ucp/3.2/api/ path: /reference/ucp/3.2/api/
- sectiontitle: UCP CLI - sectiontitle: UCP CLI
section: section:
@ -4248,3 +4202,37 @@ enterprise:
title: uninstall-ucp title: uninstall-ucp
- path: /reference/ucp/3.2/cli/upgrade/ - path: /reference/ucp/3.2/cli/upgrade/
title: upgrade title: upgrade
- sectiontitle: Standards and compliance
section:
- path: /compliance/
title: Docker standards and compliance
- sectiontitle: NIST
section:
- path: /compliance/nist/800_37/
title: NIST SP 800-37 (RMF)
- path: /compliance/nist/800_53/
title: NIST SP 800-53
- path: /compliance/nist/800_190/
title: NIST SP 800-190
- path: /compliance/nist/fips140_2/
title: FIPS 140-2
- path: /compliance/nist/nistir_8176/
title: NISTIR 8176
- path: /compliance/nist/itl_october2017/
title: NIST ITL Bulletin October 2017
- sectiontitle: OSCAL
section:
- path: /compliance/oscal/
title: OSCAL compliance guidance
- sectiontitle: CIS Benchmarks
section:
- path: /compliance/cis/docker_ee/
title: Docker Enterprise Benchmark
- path: /compliance/cis/docker_ce/
title: Docker Engine - Community Benchmark
- path: /compliance/cis/k8s/
title: Kubernetes Benchmark
- path: /compliance/fedramp/
title: FedRAMP
- path: /compliance/fisma/
title: FISMA

171
ee/index.md
View File

@ -1,11 +1,172 @@
--- ---
description: Home page for Docker Enterprise documentation description: Home page for Docker Enterprise documentation
keywords: Docker Enterprise, documentation, manual, guide, reference, api, CLI keywords: Docker Enterprise, documentation, manual, guide, reference, api, CLI
landing: true title: Docker Enterprise
skip_read_time: true
title: "Docker Enterprise"
--- ---
The Docker Enterprise platform business, including products, customers, and employees, has been acquired by Mirantis, inc., effective 13-November-2019. Among the Docker Enterprise platform technology and associated IP procured by Mirantis are Docker Engine - Enterprise, Docker Trusted Registry, Docker Universal Control Plane, and parts of the Docker CLI. The Docker Enterprise platform business, including products, customers, and employees, has been acquired by Mirantis, inc., effective 13-November-2019. For more information on the acquisition and how it may affect you and your business, refer to the [Docker Enterprise Customer FAQ](https://www.docker.com/faq-for-docker-enterprise-customers-and-partners).
As part of Mirantis, the Enterprise team will continue to develop and support the Docker Enterprise platform. For more information on the acquisition and how it may affect you and your business, refer to the [Docker Enterprise Customer FAQ](https://www.docker.com/faq-for-docker-enterprise-customers-and-partners). ## Docker Enterprise platform
The Docker Enterprise platform is the leading container platform for continuous, high-velocity innovation. Docker Enterprise is the only independent container platform that enables developers to seamlessly build and share any application — from legacy to modern — and operators to securely run them anywhere - from hybrid cloud to the edge.
Docker Enterprise enables deploying highly available workloads using either the Docker Kubernetes Service or Docker Swarm. Docker Enterprise automates many of the tasks that orchestration requires, like provisioning pods, containers, and cluster
resources. Self-healing components ensure that Docker Enterprise clusters remain highly available.
Role-based access control (RBAC) applies to Kubernetes and Swarm orchestrators, and
communication within the cluster is secured with TLS.
[Docker Content Trust](/engine/security/trust/content_trust/) is enforced
for images on all of the orchestrators.
Docker Enterprise includes Docker Universal Control Plane (UCP), the
cluster management solution from Docker. UCP can be installed
on-premises or in your public cloud of choice, and helps manage your
cluster and applications through a single interface.
![](images/docker-ee-overview-1.png){: .with-border}
### Docker Kubernetes Service
The Docker Kubernetes Service fully supports all Docker Enterprise features, including role-based access control, LDAP/AD integration, image scanning and signing enforcement policies, and security policies.
Docker Kubernetes Services features include:
- Kubernetes orchestration full feature set
- CNCF Certified Kubernetes conformance
- Kubernetes app deployment via UCP web UI or CLI (`kubectl`)
- Compose stack deployment for Swarm and Kubernetes apps (`docker stack deploy`)
- Role-based access control for Kubernetes workloads
- Blue-Green deployments, for load balancing to different app versions
- Ingress Controllers with Kubernetes L7 routing
- [Pod Security Policies](https://kubernetes.io/docs/concepts/policy/pod-security-policy/) to define a set of conditions that a pod must run with in order to be accepted into the system
- Note: Pod Security Policies are currently `Beta` status in Kubernetes 1.14
- Container Storage Interface (CSI) support
- iSCSI support for Kubernetes
- Non-disruptive Docker Enterprise platform upgrades (blue-green upgrades)
- Experimental features (planned for full GA in subsequent Docker Enterprise releases):
- Kubernetes-native ingress (Istio)
In addition, UCP integrates with Kubernetes by using admission controllers,
which enable:
- Authenticating user client bundle certificates when communicating directly
with the Kubernetes API server
- Authorizing requests via the UCP role-based access control model
- Assigning nodes to a namespace by injecting a `NodeSelector` automatically
to workloads via admission control
- Keeping all nodes in both Kubernetes and Swarm orchestrator inventories
- Fine-grained access control and privilege escalation prevention without
the `PodSecurityPolicy` admission controller
- Resolving images of deployed workloads automatically, and accepting or
rejecting images based on UCP's signing-policy feature
The default Docker Enterprise installation includes both Kubernetes and Swarm
components across the cluster, so every newly joined worker node is ready
to schedule Kubernetes or Swarm workloads.
### Orchestration platform features
![](images/docker-ee-overview-4.png){: .with-border}
- Docker Enterprise manager nodes are both Swarm managers and Kubernetes masters,
to enable high availability
- Allocate worker nodes for Swarm or Kubernetes workloads (or both)
- Single pane of glass for monitoring apps
- Enhanced Swarm hostname routing mesh with Interlock 2.0
- One platform-wide management plane: secure software supply chain, secure
multi-tenancy, and secure and highly available node management
### Secure supply chain
![](images/docker-ee-overview-3.png){: .with-border}
- DTR support for the Docker App format, based on the [CNAB](https://cnab.io) specification
- Note: Docker Apps can be deployed to clusters managed by UCP, where they will be displayed as _Stacks_
- Image signing and scanning of Kubernetes and Swarm images and Docker Apps for validating and verifying content
- Image promotion with mirroring between registries as well as Docker Hub
- Define policies for automating image promotions across the app development
lifecycle of Kubernetes and Swarm apps
### Centralized cluster management
With Docker, you can join thousands of physical or virtual machines
together to create a cluster, allowing you to deploy your
applications at scale. Docker Enterprise extends the functionality provided by Docker
Engine to make it easier to manage your cluster from a centralized place.
You can manage and monitor your container cluster using a graphical web interface.
### Deploy, manage, and monitor
With Docker Enterprise, you can manage all of the infrastructure
resources you have available, like nodes, volumes, and networks, from a central console.
You can also deploy and monitor your applications and services.
### Built-in security and access control
Docker Enterprise has its own built-in authentication mechanism with role-based access
control (RBAC), so that you can control who can access and make changes to your
cluster and applications. Also, Docker Enterprise authentication integrates with LDAP
services and supports SAML SCIM to proactively synchronize with authentication providers.
[Learn about role-based access control](./ucp/authorization/). You can also opt to enable [PKI authentication](./enable-client-certificate-authentication/) to use client certificates, rather than username and password.
![](images/docker-ee-overview-2.png){: .with-border}
Docker Enterprise integrates with Docker Trusted Registry so that you can keep the
Docker images you use for your applications behind your firewall, where they
are safe and can't be tampered with. You can also enforce security policies and only allow running applications
that use Docker images you know and trust.
#### Windows Application Security
Windows applications typically require Active Directory authentication in order to communicate with other services on the network. Container-based applications use Group Managed Service Accounts (gMSA) to provide this authentication. Docker Swarm fully supports the use of gMSAs with Windows containers.
## Docker Enterprise and the CLI
Docker Enterprise exposes the standard Docker API, so you can continue using the tools
that you already know, [including the Docker CLI client](./ucp/user-access/cli/),
to deploy and manage your applications.
For example, you can use the `docker info` command to check the
status of a Swarm managed by Docker Enterprise:
```bash
docker info
```
Which produces output similar to the following:
```bash
Containers: 38
Running: 23
Paused: 0
Stopped: 15
Images: 17
Server Version: 17.06
...
Swarm: active
NodeID: ocpv7el0uz8g9q7dmw8ay4yps
Is Manager: true
ClusterID: tylpv1kxjtgoik2jnrg8pvkg6
Managers: 1
…
```
## Use the Kubernetes CLI
Docker Enterprise exposes the standard Kubernetes API, so you can use [kubectl
to manage your Kubernetes workloads](./ucp/user-access/cli/):
```bash
kubectl cluster-info
```
Which produces output similar to the following:
```bash
Kubernetes master is running at https://54.200.115.43:6443
KubeDNS is running at https://54.200.115.43:6443/api/v1/namespaces/kube-system/services/kube-dns:dns/proxy
To further debug and diagnose cluster problems, use 'kubectl cluster-info dump'.
```

35
ee/release-notes.md
View File

@ -1,35 +1,10 @@
--- ---
title: Docker Enterprise release notes title: Install or upgrade Docker Enterprise components
description: Learn about the new features, bug fixes, and breaking changes for Docker Enterprise. description: Learn about the new features, bug fixes, and breaking changes for Docker Enterprise.
keywords: engine enterprise, ucp, dtr, desktop enterprise, whats new, release notes keywords: engine enterprise, ucp, dtr, desktop enterprise, whats new, release notes
--- ---
This page provides information about Docker Enterprise 3.0. For This page provides information about Docker Enterprise 3.0. For detailed information about for each enterprise component, refer to the individual component release notes below.
detailed information about for each enterprise component, refer to the individual component release notes
pages listed in the following **Docker Enterprise components install and upgrade** section.
## What’s New?
| Feature | Component | Component version |
|---------|-----------|-------------------|
| [Group Managed Service Accounts (gMSA)](/engine/swarm/services.md#gmsa-for-swarm) | UCP | 3.2.0 |
| [Open Security Controls Assessment Language (OSCAL)](/compliance/oscal/) | UCP | 3.2.0 |
| [Container storage interface (CSI)](/ee/ucp/kubernetes/storage/use-csi/) | UCP | 3.2.0 |
| [Internet Small Computer System Interface (iSCSI)](/ee/ucp/kubernetes/storage/use-iscsi/) | UCP | 3.2.0 |
| [System for Cross-domain Identity Management (SCIM)](/ee/ucp/admin/configure/integrate-scim/) | UCP | 3.2.0 |
| [Pod Security Policies](/ee/ucp/kubernetes/pod-security-policies/) | UCP | 3.2.0 |
| [Docker Registry CLI (Experimental)](/engine/reference/commandline/registry/) | DTR | 2.7.0 |
| [App Distribution](/ee/dtr/user/manage-applications/) | DTR | 2.7.0 |
| [Client certificate-based Authentication](/ee/enable-client-certificate-authentication/) | DTR and UCP|2.7.0 (DTR) and 3.2.0 (UCP)|
| [Application Designer](/ee/desktop/app-designer/) | Docker Desktop Enterprise | 0.1.4 |
| [Docker App (Experimental)](/app/working-with-app/) |CLI | 0.8.0 |
| [Docker Assemble (Experimental)](/assemble/install/) | CLI | 0.36.0 |
| [Docker Buildx (Experimental)](/buildx/working-with-buildx/)| CLI | 0.2.2 |
| [Docker Cluster](/cluster/) | CLI | 1.0.0 |
| [Docker Template CLI (Experimental)](/app-template/working-with-template/) | CLI | 0.1.4 |
## Docker Enterprise components install and upgrade
| Component Release Notes | Version | Install | Upgrade | | Component Release Notes | Version | Install | Upgrade |
|---------|-----------|-------------------|-------------- | |---------|-----------|-------------------|-------------- |
@ -38,8 +13,4 @@ pages listed in the following **Docker Enterprise components install and upgrade
| [DTR](/ee/dtr/release-notes/) | 2.7 | [Install DTR](/ee/dtr/admin/install/) | [Upgrade DTR](/ee/dtr/admin/upgrade/) | | [DTR](/ee/dtr/release-notes/) | 2.7 | [Install DTR](/ee/dtr/admin/install/) | [Upgrade DTR](/ee/dtr/admin/upgrade/) |
| [Docker Desktop Enterprise](/ee/desktop/release-notes/) | 2.1.0 |Install Docker Desktop Enterprise [Mac](/ee/desktop/admin/install/mac/), [Windows](/ee/desktop/admin/install/windows/) | Upgrade Docker Desktop Enterprise [Mac](/ee/desktop/admin/install/mac/), [Windows](/ee/desktop/admin/install/windows/) | | [Docker Desktop Enterprise](/ee/desktop/release-notes/) | 2.1.0 |Install Docker Desktop Enterprise [Mac](/ee/desktop/admin/install/mac/), [Windows](/ee/desktop/admin/install/windows/) | Upgrade Docker Desktop Enterprise [Mac](/ee/desktop/admin/install/mac/), [Windows](/ee/desktop/admin/install/windows/) |
Refer to the [Compatibility Matrix](https://success.docker.com/article/compatibility-matrix) and the [Maintenance Lifecycle](https://success.docker.com/article/maintenance-lifecycle) for compatibility and software maintenance details. Refer to the [Compatibility Matrix](https://success.docker.com/article/compatibility-matrix) and the [Maintenance Lifecycle](https://success.docker.com/article/maintenance-lifecycle) for compatibility and software maintenance details.

6
index.md
View File

@ -55,10 +55,8 @@ channel for more predictability.
</div> </div>
</div> </div>
## Docker Enterprise ### Docker Enterprise
The Docker Enterprise platform business, including products, customers, and employees, has been acquired by Mirantis, inc., effective 13-November-2019. Among the Docker Enterprise platform technology and associated IP procured by Mirantis are Docker Engine - Enterprise, Docker Trusted Registry, Docker Universal Control Plane, and parts of the Docker CLI. TThe Docker Enterprise platform business, including products, customers, and employees, has been acquired by Mirantis, inc., effective 13-November-2019. For more information on the acquisition and how it may affect you and your business, refer to the [Docker Enterprise Customer FAQ](https://www.docker.com/faq-for-docker-enterprise-customers-and-partners).
As part of Mirantis, the Enterprise team will continue to develop and support the Docker Enterprise platform. For more information on the acquisition and how it may affect you and your business, refer to the [Docker Enterprise Customer FAQ](https://www.docker.com/faq-for-docker-enterprise-customers-and-partners).
For Docker Enterprise documentation, see the [Docker Enterprise](/ee/) tab. For Docker Enterprise documentation, see the [Docker Enterprise](/ee/) tab.