diff --git a/deploy/images/docker-ee-overview-1.png b/deploy/images/docker-ee-overview-1.png new file mode 100644 index 0000000000..deb29c4574 Binary files /dev/null and b/deploy/images/docker-ee-overview-1.png differ diff --git a/deploy/images/docker-ee-overview-2.png b/deploy/images/docker-ee-overview-2.png new file mode 100644 index 0000000000..9cdea63566 Binary files /dev/null and b/deploy/images/docker-ee-overview-2.png differ diff --git a/deploy/index.md b/deploy/index.md index 2302c699ee..3470eead74 100644 --- a/deploy/index.md +++ b/deploy/index.md @@ -3,14 +3,12 @@ title: Docker Enterprise Edition description: | Learn about Docker Enterprise Edition, the enterprise-grade cluster management solution from Docker. -keywords: ucp, overview, orchestration, clustering, Docker EE +keywords: Docker EE, UCP, DTR, orchestration, cluster redirect_from: - /ucp/ ui_tabs: - version: ucp-3.0 orhigher: true -- version: ucp-2.2 - orlower: true cli_tabs: - version: docker-cli-linux - version: docker-cli-win @@ -24,62 +22,127 @@ next_steps: {% if include.ui %} +Docker Enterprise Edition (*Docker EE*) is a Containers-as-a-Service (CaaS) +platform that enables a secure software supply chain and deploys diverse +applications for high availability across disparate infrastructure, both +on-premises and in the cloud. + {% if include.version=="ucp-3.0" %} -Docker Enterprise Edition (EE) is a secure, scalable, and supported container -platform for building and orchestrating applications across multi-tenant Linux -and Windows environments. -Docker Enterprise Edition (EE) is a Containers-as-a-Service platform for IT that manages and secures diverse applications across disparate infrastructure, both on-premises and in the cloud. +Docker Enterprise Edition is a secure, scalable, and supported container +platform for building and orchestrating applications across multi-tenant Linux, +Windows Server 2016, and IBM z Systems environments. +Docker EE enables deploying your workloads for high availability (HA) onto the +orchestrator of your choice. Docker EE automates many of the tasks that +orchestration requires, like provisioning pods, containers, and cluster +resources. Self-healing components ensure that Docker EE clusters remain highly +available. -Docker Enterprise Edition (EE) enables deploying your workloads for high -availability (HA) onto the orchestrator of your choice. Docker EE automates -many of the tasks that orchestration requires, like provisioning pods, -containers, and cluster resources. Self-healing components - -Role-based access control applies to all of the orchestrators, and communcation -within the cluster is secured with TLS. [Docker Content Trust](/engine/security/trust/content_trust/) -is enforced for images on all of the orchestrators. - - -Interoperability between swarm and kubernetes workloads (networking/storage) -Fully supports all EE features including LDAP/AD, RBAC, Scanning, Signing Enforcement, Security Policies, etc. +Role-based access control applies to Kubernetes and Swarm orchestrators, and +communication within the cluster is secured with TLS. +[Docker Content Trust](/engine/security/trust/content_trust/) is enforced +for images on all of the orchestrators. - -{% elsif include.version=="ucp-2.2" %} Docker Universal Control Plane (UCP) is the enterprise-grade cluster management solution from Docker. You install it on-premises or in your virtual private cloud, and it helps you manage your Docker swarm and applications through a single interface. -![](../datacenter/images/ucp.png){: .with-border} +![](images/docker-ee-overview-1.png){: .with-border} -## Centralized swarm management +## Docker Enterprise Edition features + +Docker EE 18.01 provides multi-architecture orchestration for Kubernetes and +Swarm workloads. Docker EE enables a secure software supply chain, with image +promotion, mirroring between registries, and signing/scanning enforcement for +Kubernetes images. + +### Kubernetes support + +Kubernetes in Docker EE fully supports all Docker EE features, including +role-based access control, LDAP/AD integration, scanning, signing enforcement, +and security policies. + +- Kubernetes orchestration features +- CNCF Certified Kubernetes conformance +- Deploy Kubernetes apps via web UI or CLI +- Compose Stack deploy for both Swarm and Kubernetes apps +- Role-based access control for Kubernetes workloads +- Docker EE install includes both Swarm and Kubernetes components across the + cluster, so every newly joined worker node is ready to schedule Kubernetes + and Swarm workloads +- Pod-based autoscaling, to increase and decrease pod count based on CPU usage +- Blue-Green deployments, for load balancing to different app versions +- Ingress Controllers with Kubernetes L7 routing +- Interoperability between Swarm and Kubernetes workloads for networking and + storage + +### Orchestration platform + +- Docker EE Manager Nodes are both Swarm managers and Kubernetes masters to enable + high availability +- Allocate nodes for Swarm and Kubernetes workloads +- Single pane of glass for monitoring apps +- Enhanced Swarm hostname routing mesh with Interlock 2.0 +- One platform-wide management plane: secure software supply chain, secure + multi-tenancy, and secure and highly available node management + +### Secure supply chain + +- Image promotion with mirroring between registries +- Signing/scanning enforcement for Kubernetes + +## Centralized cluster management With Docker, you can join up to thousands of physical or virtual machines -together to create a container cluster, or swarm, allowing you to deploy your -applications at scale. Docker Universal Control Plane extends the -functionality provided by Docker to make it easier to manage your swarm -from a centralized place. +together to create a container cluster, allowing you to deploy your +applications at scale. Docker EE extends the functionality provided by Docker +Engine to make it easier to manage your cluster from a centralized place. -You can manage and monitor your container cluster using a graphical UI. +You can manage and monitor your container cluster using a graphical web UI. -![](../datacenter/images/try-ddc-2.png){: .with-border} +## Deploy, manage, and monitor + +With Docker EE, you can manage from a centralized place all of the computing +resources you have available, like nodes, volumes, and networks. + +You can also deploy and monitor your applications and services. + +## Built-in security and access control + +Docker EE has its own built-in authentication mechanism with role-based access +control (RBAC), so that you can control who can access and make changes to your +swarm and applications. Also, Docker EE authentication integrates with LDAP +services. +[Learn about role-based access control](access-control/index.md). + +![](images/docker-ee-overview-2.png){: .with-border} + +Docker EE integrates with Docker Trusted Registry so that you can keep the +Docker images you use for your applications behind your firewall, where they +are safe and can't be tampered with. + +You can also enforce security policies and only allow running applications +that use Docker images you know and trust. {% endif %} + {% endif %} {% if include.cli %} -Since UCP exposes the standard Docker API, you can continue using the tools -you already know, including the Docker CLI client, to deploy and manage your + + Docker EE exposes the standard Docker API, so you can continue using the tools +that you already know, including the Docker CLI client, to deploy and manage your applications. For example, you can use the `docker info` command to check the -status of a Docker swarm managed by UCP: +status of a Swarm managed by Docker EE: {% if include.version=="docker-cli-linux" %} + ```bash -$ docker info +docker info Containers: 38 Running: 23 @@ -95,40 +158,25 @@ ClusterID: tylpv1kxjtgoik2jnrg8pvkg6 Managers: 1 … ``` + {% elsif include.version=="docker-cli-win" %} + ```powershell -PS> docker info +docker info ``` + {% elsif include.version=="kubectl" %} -UCP also exposes the standard Kubernetes API, so you can use the usual -Kubernetes commands, like `kubectl cluster-info`: + +Docker EE exposes the standard Kubernetes API, and it installs the command-line +tool, `kubectl`, by default, so you can use the usual Kubernetes commands, like +`kubectl cluster-info`: ```bash $ kubectl cluster-info ``` -{% endif %} -## Deploy, manage, and monitor -With Docker UCP, you can manage from a centralized place all of the computing -resources you have available, like nodes, volumes, and networks. - -You can also deploy and monitor your applications and services. - -## Built-in security and access control - -Docker UCP has its own built-in authentication mechanism and integrates with -LDAP services. It also has role-based access control (RBAC), so that you can -control who can access and make changes to your swarm and applications. -[Learn about role-based access control](access-control/index.md). - -![](../datacenter/ucp/2.2/guides/images/overview-3.png){: .with-border} - -Docker UCP integrates with Docker Trusted Registry so that you can keep the -Docker images you use for your applications behind your firewall, where they -are safe and can't be tampered with. - -You can also enforce security policies and only allow running applications -that use Docker images you know and trust. + +{% endif %} {% endif %}