diff --git a/deploy/deploy-kubernetes-workload.md b/deploy/deploy-kubernetes-workload.md
new file mode 100644
index 0000000000..1edc8ee5e8
--- /dev/null
+++ b/deploy/deploy-kubernetes-workload.md
@@ -0,0 +1,166 @@
+---
+title: Deploy a workload to a Kubernetes cluster
+description: |
+  Use Docker Enterprise Edition to deploy Kubernetes workloads from yaml files. 
+keywords: UCP, Docker EE, orchestration, Kubernetes, cluster
+redirect_from:
+- /ucp/
+ui_tabs:
+- version: ucp-3.0
+  orhigher: true
+cli_tabs:
+- version: docker-cli-linux
+- version: docker-cli-win
+- version: kubectl
+next_steps:
+- path: /engine/install
+  title: Install Docker
+- path: /get-started/
+  title: Get Started with Docker
+---
+
+{% if include.ui %}
+The Docker EE web UI enables deploying your Kubernetes YAML files. In most
+cases, no modifications are necessary to deploy on a cluster that's managed by
+Docker EE. 
+
+## Deploy an NGINX server
+
+In this example, a simple Kubernetes Deployment object for an NGINX server is
+defined in YAML:
+
+```yaml
+apiVersion: apps/v1beta2
+kind: Deployment
+metadata:
+  name: nginx-deployment
+spec:
+  selector:
+    matchLabels:
+      app: nginx
+  replicas: 2
+  template:
+    metadata:
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - name: nginx
+        image: nginx:1.7.9
+        ports:
+        - containerPort: 80
+```
+
+The YAML specifies an earlier version of NGINX, which will be updated in a
+later section.
+
+1. Open the Docker EE web UI, and in the left pane, click **Kubernetes**.
+2. Click **Create** to open the **Create Kubernetes Object** page.
+3. In the **Namespace** dropdown, select **default**.
+4. In the **Object YAML** editor, paste the previous YAML.
+5. Click **Create**.
+
+![](images/deploy-kubernetes-yaml.png){: .with-border}
+
+## Inspect the deployment
+
+The Docker EE web UI shows the status of your deployment when you click the 
+links in the **Kubernetes** section of the left pane.
+
+1. In the left pane. click **Controllers** to see the resource controllers
+   that Docker EE created for the NGINX server.
+2. Click the **nginx-deployment** controller, and in the details pane, scroll
+   to the **Template** section. This shows the values that Docker EE used to 
+   create the deployment.
+3. In the left pane, click **Pods** to see the pods that are provisioned for
+   the NGINX server. Click one of the pods, and in the details pane, scroll to
+   the **Status** section to see that pod's phase, IP address, and other 
+   properties.
+
+![](images/deploy-kubernetes-pods.png){: .with-border}
+
+## Update the deployment
+
+Update an existing deployment by applying an updated YAML file. In this
+example, the server is scaled up to four replicas and updated to a later
+version of NGINX. 
+
+```yaml
+apiVersion: apps/v1beta2
+kind: Deployment
+metadata:
+  name: nginx-deployment
+spec:
+  selector:
+    matchLabels:
+      app: nginx
+  replicas: 4
+  template:
+    metadata:
+      labels:
+        app: nginx
+    spec:
+      containers:
+      - name: nginx
+        image: nginx:1.8
+        ports:
+        - containerPort: 80
+```
+
+1. In the left pane, click **Controllers** and select the **nginx-deployment**
+   controller.
+2. In the details pane, click **Configure**, and in the **Edit Deployment**
+   page, paste the previous YAML.
+3. Click **Edit** to update the deployment with the new YAML.
+
+{% endif %}
+
+{% if include.cli %}
+With Docker EE, you deploy your Kubernetes objects on the command line by using
+`kubectl`. [Install and set up kubectl](https://kubernetes.io/docs/tasks/tools/install-kubectl/).
+
+Docker EE ensures that communication with the cluster is secure. When you run
+`kubectl` commands on a Docker EE node, you need to authenticate your request
+with a client certificate bundle. [Get your client bundle by using the Docker EE web UI or the command line](/datacenter/ucp/2.2/guides/user/access-ucp/cli-based-access.md).
+If you don't have the client bundle set up, you'll see an error when you run
+`kubectl` commands:
+
+```none
+The connection to the server localhost:8080 was refused - did you specify the right host or port?
+```
+
+When you have `kubectl` and the client bundle installed, you can deploy a
+Kubernetes object from YAML.
+
+Save the previous YAML to a file named "deployment.yaml", and use the following
+command to deploy the NGINX server: 
+
+```bash
+kubectl apply -f deployment.yaml
+```
+## Inspect the deployment
+
+Use the `describe deployment` option to inspect the deployment: 
+
+```bash
+kubectl describe deployment nginx-deployment
+```
+
+Also, you can use the Docker EE web UI to see the deployment's pods and
+controllers.
+
+## Update the deployment
+
+Update an existing deployment by applying an updated YAML file. 
+
+Save the previous YAML to a file named "update.yaml", and use the following
+command to deploy the NGINX server: 
+
+```bash
+kubectl apply -f update.yaml
+```
+
+{% endif %}
+
+
+
diff --git a/deploy/images/deploy-kubernetes-pods.png b/deploy/images/deploy-kubernetes-pods.png
new file mode 100644
index 0000000000..5fa198ef33
Binary files /dev/null and b/deploy/images/deploy-kubernetes-pods.png differ
diff --git a/deploy/images/deploy-kubernetes-yaml.png b/deploy/images/deploy-kubernetes-yaml.png
new file mode 100644
index 0000000000..205e0f1c9e
Binary files /dev/null and b/deploy/images/deploy-kubernetes-yaml.png differ
diff --git a/deploy/index.md b/deploy/index.md
new file mode 100644
index 0000000000..bd589c1a63
--- /dev/null
+++ b/deploy/index.md
@@ -0,0 +1,120 @@
+---
+title: Universal Control Plane
+description: |
+  Learn about Docker Universal Control Plane, the enterprise-grade cluster
+  management solution from Docker.
+keywords: ucp, overview, orchestration, clustering
+redirect_from:
+- /ucp/
+ui_tabs:
+- version: ucp-3.0
+  orhigher: true
+- version: ucp-2.2
+  orlower: true
+cli_tabs:
+- version: docker-cli-linux
+- version: docker-cli-win
+- version: kubectl
+next_steps:
+- path: /engine/install
+  title: Install Docker
+- path: /get-started/
+  title: Get Started with Docker
+---
+
+{% if include.ui %}
+Version-independent intro para
+
+{% if include.version=="ucp-3.0" %}
+Section 1: This topic is under construction.
+
+- Step 1
+- Step 2
+- Step 3
+
+{% elsif include.version=="ucp-2.2" %}
+Docker Universal Control Plane (UCP) is the enterprise-grade cluster management
+solution from Docker. You install it on-premises or in your virtual private
+cloud, and it helps you manage your Docker swarm and applications through a 
+single interface.
+
+![](../datacenter/images/ucp.png){: .with-border}
+
+## Centralized swarm management
+
+With Docker, you can join up to thousands of physical or virtual machines
+together to create a container cluster, or swarm, allowing you to deploy your
+applications at scale. Docker Universal Control Plane extends the
+functionality provided by Docker to make it easier to manage your swarm
+from a centralized place.
+
+You can manage and monitor your container cluster using a graphical UI.
+
+![](../datacenter/images/try-ddc-2.png){: .with-border}
+
+{% endif %}
+{% endif %}
+
+{% if include.cli %}
+Since UCP exposes the standard Docker API, you can continue using the tools
+you already know, including the Docker CLI client, to deploy and manage your
+applications.
+
+For example, you can use the `docker info` command to check the
+status of a Docker swarm managed by UCP:
+
+{% if include.version=="docker-cli-linux" %}
+```bash
+$ docker info
+
+Containers: 38
+Running: 23
+Paused: 0
+Stopped: 15
+Images: 17
+Server Version: 17.06
+...
+Swarm: active
+NodeID: ocpv7el0uz8g9q7dmw8ay4yps
+Is Manager: true
+ClusterID: tylpv1kxjtgoik2jnrg8pvkg6
+Managers: 1
+…
+```
+{% elsif include.version=="docker-cli-win" %}
+```powershell
+PS> docker info
+```
+{% elsif include.version=="kubectl" %}
+UCP also exposes the standard Kubernetes API, so you can use the usual
+Kubernetes commands, like `kubectl cluster-info`:
+
+```bash
+$ kubectl cluster-info
+```
+{% endif %}
+
+## Deploy, manage, and monitor
+
+With Docker UCP, you can manage from a centralized place all of the computing
+resources you have available, like nodes, volumes, and networks.
+
+You can also deploy and monitor your applications and services.
+
+## Built-in security and access control
+
+Docker UCP has its own built-in authentication mechanism and integrates with
+LDAP services. It also has role-based access control (RBAC), so that you can
+control who can access and make changes to your swarm and applications.
+[Learn about role-based access control](access-control/index.md).
+
+![](../datacenter/ucp/2.2/guides/images/overview-3.png){: .with-border}
+
+Docker UCP integrates with Docker Trusted Registry so that you can keep the
+Docker images you use for your applications behind your firewall, where they
+are safe and can't be tampered with.
+
+You can also enforce security policies and only allow running applications
+that use Docker images you know and trust.
+
+{% endif %}