mirror of https://github.com/docker/docs.git
[WIP] Clean up index.md a bit (#297)
* Clean up index.md a bit * Update screenshots
This commit is contained in:
Jim Galasyn
parent
a89b3919ee
commit
8401c3681b
Binary file not shown.
|
After Width: | Height: | Size: 83 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 86 KiB |
164
deploy/index.md
164
deploy/index.md
|
|
@ -3,14 +3,12 @@ title: Docker Enterprise Edition
|
|||
description: |
|
||||
Learn about Docker Enterprise Edition, the enterprise-grade cluster
|
||||
management solution from Docker.
|
||||
keywords: ucp, overview, orchestration, clustering, Docker EE
|
||||
keywords: Docker EE, UCP, DTR, orchestration, cluster
|
||||
redirect_from:
|
||||
- /ucp/
|
||||
ui_tabs:
|
||||
- version: ucp-3.0
|
||||
orhigher: true
|
||||
- version: ucp-2.2
|
||||
orlower: true
|
||||
cli_tabs:
|
||||
- version: docker-cli-linux
|
||||
- version: docker-cli-win
|
||||
|
|
@ -24,62 +22,127 @@ next_steps:
|
|||
|
||||
{% if include.ui %}
|
||||
|
||||
Docker Enterprise Edition (*Docker EE*) is a Containers-as-a-Service (CaaS)
|
||||
platform that enables a secure software supply chain and deploys diverse
|
||||
applications for high availability across disparate infrastructure, both
|
||||
on-premises and in the cloud.
|
||||
|
||||
{% if include.version=="ucp-3.0" %}
|
||||
Docker Enterprise Edition (EE) is a secure, scalable, and supported container
|
||||
platform for building and orchestrating applications across multi-tenant Linux
|
||||
and Windows environments.
|
||||
|
||||
Docker Enterprise Edition (EE) is a Containers-as-a-Service platform for IT that manages and secures diverse applications across disparate infrastructure, both on-premises and in the cloud.
|
||||
Docker Enterprise Edition is a secure, scalable, and supported container
|
||||
platform for building and orchestrating applications across multi-tenant Linux,
|
||||
Windows Server 2016, and IBM z Systems environments.
|
||||
|
||||
Docker EE enables deploying your workloads for high availability (HA) onto the
|
||||
orchestrator of your choice. Docker EE automates many of the tasks that
|
||||
orchestration requires, like provisioning pods, containers, and cluster
|
||||
resources. Self-healing components ensure that Docker EE clusters remain highly
|
||||
available.
|
||||
|
||||
Docker Enterprise Edition (EE) enables deploying your workloads for high
|
||||
availability (HA) onto the orchestrator of your choice. Docker EE automates
|
||||
many of the tasks that orchestration requires, like provisioning pods,
|
||||
containers, and cluster resources. Self-healing components
|
||||
|
||||
Role-based access control applies to all of the orchestrators, and communcation
|
||||
within the cluster is secured with TLS. [Docker Content Trust](/engine/security/trust/content_trust/)
|
||||
is enforced for images on all of the orchestrators.
|
||||
|
||||
|
||||
Interoperability between swarm and kubernetes workloads (networking/storage)
|
||||
Fully supports all EE features including LDAP/AD, RBAC, Scanning, Signing Enforcement, Security Policies, etc.
|
||||
Role-based access control applies to Kubernetes and Swarm orchestrators, and
|
||||
communication within the cluster is secured with TLS.
|
||||
[Docker Content Trust](/engine/security/trust/content_trust/) is enforced
|
||||
for images on all of the orchestrators.
|
||||
|
||||
|
||||
{% elsif include.version=="ucp-2.2" %}
|
||||
Docker Universal Control Plane (UCP) is the enterprise-grade cluster management
|
||||
solution from Docker. You install it on-premises or in your virtual private
|
||||
cloud, and it helps you manage your Docker swarm and applications through a
|
||||
single interface.
|
||||
|
||||
{: .with-border}
|
||||
{: .with-border}
|
||||
|
||||
## Centralized swarm management
|
||||
## Docker Enterprise Edition features
|
||||
|
||||
Docker EE 18.01 provides multi-architecture orchestration for Kubernetes and
|
||||
Swarm workloads. Docker EE enables a secure software supply chain, with image
|
||||
promotion, mirroring between registries, and signing/scanning enforcement for
|
||||
Kubernetes images.
|
||||
|
||||
### Kubernetes support
|
||||
|
||||
Kubernetes in Docker EE fully supports all Docker EE features, including
|
||||
role-based access control, LDAP/AD integration, scanning, signing enforcement,
|
||||
and security policies.
|
||||
|
||||
- Kubernetes orchestration features
|
||||
- CNCF Certified Kubernetes conformance
|
||||
- Deploy Kubernetes apps via web UI or CLI
|
||||
- Compose Stack deploy for both Swarm and Kubernetes apps
|
||||
- Role-based access control for Kubernetes workloads
|
||||
- Docker EE install includes both Swarm and Kubernetes components across the
|
||||
cluster, so every newly joined worker node is ready to schedule Kubernetes
|
||||
and Swarm workloads
|
||||
- Pod-based autoscaling, to increase and decrease pod count based on CPU usage
|
||||
- Blue-Green deployments, for load balancing to different app versions
|
||||
- Ingress Controllers with Kubernetes L7 routing
|
||||
- Interoperability between Swarm and Kubernetes workloads for networking and
|
||||
storage
|
||||
|
||||
### Orchestration platform
|
||||
|
||||
- Docker EE Manager Nodes are both Swarm managers and Kubernetes masters to enable
|
||||
high availability
|
||||
- Allocate nodes for Swarm and Kubernetes workloads
|
||||
- Single pane of glass for monitoring apps
|
||||
- Enhanced Swarm hostname routing mesh with Interlock 2.0
|
||||
- One platform-wide management plane: secure software supply chain, secure
|
||||
multi-tenancy, and secure and highly available node management
|
||||
|
||||
### Secure supply chain
|
||||
|
||||
- Image promotion with mirroring between registries
|
||||
- Signing/scanning enforcement for Kubernetes
|
||||
|
||||
## Centralized cluster management
|
||||
|
||||
With Docker, you can join up to thousands of physical or virtual machines
|
||||
together to create a container cluster, or swarm, allowing you to deploy your
|
||||
applications at scale. Docker Universal Control Plane extends the
|
||||
functionality provided by Docker to make it easier to manage your swarm
|
||||
from a centralized place.
|
||||
together to create a container cluster, allowing you to deploy your
|
||||
applications at scale. Docker EE extends the functionality provided by Docker
|
||||
Engine to make it easier to manage your cluster from a centralized place.
|
||||
|
||||
You can manage and monitor your container cluster using a graphical UI.
|
||||
You can manage and monitor your container cluster using a graphical web UI.
|
||||
|
||||
{: .with-border}
|
||||
## Deploy, manage, and monitor
|
||||
|
||||
With Docker EE, you can manage from a centralized place all of the computing
|
||||
resources you have available, like nodes, volumes, and networks.
|
||||
|
||||
You can also deploy and monitor your applications and services.
|
||||
|
||||
## Built-in security and access control
|
||||
|
||||
Docker EE has its own built-in authentication mechanism with role-based access
|
||||
control (RBAC), so that you can control who can access and make changes to your
|
||||
swarm and applications. Also, Docker EE authentication integrates with LDAP
|
||||
services.
|
||||
[Learn about role-based access control](access-control/index.md).
|
||||
|
||||
{: .with-border}
|
||||
|
||||
Docker EE integrates with Docker Trusted Registry so that you can keep the
|
||||
Docker images you use for your applications behind your firewall, where they
|
||||
are safe and can't be tampered with.
|
||||
|
||||
You can also enforce security policies and only allow running applications
|
||||
that use Docker images you know and trust.
|
||||
|
||||
{% endif %}
|
||||
|
||||
{% endif %}
|
||||
|
||||
{% if include.cli %}
|
||||
Since UCP exposes the standard Docker API, you can continue using the tools
|
||||
you already know, including the Docker CLI client, to deploy and manage your
|
||||
|
||||
Docker EE exposes the standard Docker API, so you can continue using the tools
|
||||
that you already know, including the Docker CLI client, to deploy and manage your
|
||||
applications.
|
||||
|
||||
For example, you can use the `docker info` command to check the
|
||||
status of a Docker swarm managed by UCP:
|
||||
status of a Swarm managed by Docker EE:
|
||||
|
||||
{% if include.version=="docker-cli-linux" %}
|
||||
|
||||
```bash
|
||||
$ docker info
|
||||
docker info
|
||||
|
||||
Containers: 38
|
||||
Running: 23
|
||||
|
|
@ -95,40 +158,25 @@ ClusterID: tylpv1kxjtgoik2jnrg8pvkg6
|
|||
Managers: 1
|
||||
…
|
||||
```
|
||||
|
||||
{% elsif include.version=="docker-cli-win" %}
|
||||
|
||||
```powershell
|
||||
PS> docker info
|
||||
docker info
|
||||
```
|
||||
|
||||
{% elsif include.version=="kubectl" %}
|
||||
UCP also exposes the standard Kubernetes API, so you can use the usual
|
||||
Kubernetes commands, like `kubectl cluster-info`:
|
||||
|
||||
Docker EE exposes the standard Kubernetes API, and it installs the command-line
|
||||
tool, `kubectl`, by default, so you can use the usual Kubernetes commands, like
|
||||
`kubectl cluster-info`:
|
||||
|
||||
```bash
|
||||
$ kubectl cluster-info
|
||||
```
|
||||
{% endif %}
|
||||
|
||||
## Deploy, manage, and monitor
|
||||
|
||||
With Docker UCP, you can manage from a centralized place all of the computing
|
||||
resources you have available, like nodes, volumes, and networks.
|
||||
|
||||
You can also deploy and monitor your applications and services.
|
||||
|
||||
## Built-in security and access control
|
||||
|
||||
Docker UCP has its own built-in authentication mechanism and integrates with
|
||||
LDAP services. It also has role-based access control (RBAC), so that you can
|
||||
control who can access and make changes to your swarm and applications.
|
||||
[Learn about role-based access control](access-control/index.md).
|
||||
|
||||
{: .with-border}
|
||||
|
||||
Docker UCP integrates with Docker Trusted Registry so that you can keep the
|
||||
Docker images you use for your applications behind your firewall, where they
|
||||
are safe and can't be tampered with.
|
||||
|
||||
You can also enforce security policies and only allow running applications
|
||||
that use Docker images you know and trust.
|
||||
|
||||
{% endif %}
|
||||
|
||||
{% endif %}
|
||||
|
|
|
|||
Loading…
Reference in New Issue