docker
/
docs
mirror of https://github.com/docker/docs.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

update for 3.0 (#8897)

This commit is contained in:
Jim Armstrong 2019-07-26 17:38:02 -05:00 committed by Adrian Plata
parent a4f7555d37
commit d1122da358
1 changed files with 51 additions and 39 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

90
ee/index.md
View File

@ -1,24 +1,20 @@
--- ---
title: Docker Enterprise title: Docker Enterprise
description: Learn about Docker Enterprise, the enterprise-grade cluster management solution from Docker. description: Learn about Docker Enterprise, the industry-leading container platform to securely build, share, and run any application, on any infrastructure.
keywords: Docker Enterprise, UCP, DTR, orchestration, cluster, Kubernetes keywords: Docker EE, Docker Enterprise, UCP, DTR, orchestration, cluster, Kubernetes, CaaS
redirect_from: redirect_from:
- /enterprise/ - /enterprise/
- /manuals/ - /manuals/
--- ---
Docker Enterprise is a Containers as a Service (CaaS) platform that enables a secure software supply
chain and deploys diverse applications for high availability across disparate The Docker Enterprise platform is the leading container platform for continuous, high-velocity innovation. Docker is the only independent container platform that enables developers to seamlessly build and share any application — from legacy to modern — and operators to securely run them anywhere - from hybrid cloud to the edge.
infrastructure, both on-premises and in the cloud.
Docker Enterprise is a secure, scalable, and supported container platform for building and Docker Enterprise is a secure, scalable, and supported container platform for building and
orchestrating applications across multi-tenant Linux, Windows Server 2016, and Windows Server 2019. orchestrating applications across multi-tenant Linux, Windows Server 2016, and Windows Server 2019.
Docker Enterprise enables deploying your workloads for high availability (HA) onto the Docker Enterprise enables deploying highly available workloads using either the Docker Kubernetes Service or Docker Swarm. Docker Enterprise automates many of the tasks that orchestration requires, like provisioning pods, containers, and cluster
orchestrator of your choice. Docker Enterprise automates many of the tasks that resources. Self-healing components ensure that Docker Enterprise clusters remain highly available.
orchestration requires, like provisioning pods, containers, and cluster
resources. Self-healing components ensure that Docker Enterprise clusters remain highly
available.
Role-based access control (RBAC) applies to Kubernetes and Swarm orchestrators, and Role-based access control (RBAC) applies to Kubernetes and Swarm orchestrators, and
communication within the cluster is secured with TLS. communication within the cluster is secured with TLS.
@ -26,34 +22,40 @@ communication within the cluster is secured with TLS.
for images on all of the orchestrators. for images on all of the orchestrators.
Docker Enterprise includes Docker Universal Control Plane (UCP), the Docker Enterprise includes Docker Universal Control Plane (UCP), the
cluster management solution from Docker. You install it cluster management solution from Docker. UCP can be installed
on-premises or in your virtual private cloud, and it helps you manage your on-premises or in your public cloud of choice, and helps manage your
cluster and applications through a single interface. cluster and applications through a single interface.
![](images/docker-ee-overview-1.png){: .with-border} ![](images/docker-ee-overview-1.png){: .with-border}
## Docker Enterprise features ## Docker Enterprise features
Docker Enterprise provides multi-architecture orchestration for Kubernetes and Docker Enterprise provides multi-architecture orchestration using the Docker Kubernetes Service and
Swarm workloads. Docker Enterprise enables a secure software supply chain, with image Docker Swarm orchestrators. Docker Enterprise enables a secure software supply chain, with policy-based image
promotion, mirroring between registries, and signing/scanning enforcement for promotion, image mirroring between registries - including Docker Hub, and signing & scanning enforcement for container images.
Kubernetes images.
### Kubernetes support ### Docker Kubernetes Service
Kubernetes in Docker Enterprise fully supports all Docker Enterprise features, including The Docker Kubernetes Service fully supports all Docker Enterprise features, including
role-based access control, LDAP/AD integration, scanning, signing enforcement, role-based access control, LDAP/AD integration, image scanning and signing enforcement policies,
and security policies. and security policies.
Kubernetes features on Docker Enterprise include: Docker Kubernetes Services features include:
- Kubernetes orchestration full feature set - Kubernetes orchestration full feature set
- CNCF Certified Kubernetes conformance - CNCF Certified Kubernetes conformance
- Kubernetes app deployment by using web UI or CLI - Kubernetes app deployment via UCP web UI or CLI (`kubectl`)
- Compose stack deployment for Swarm and Kubernetes apps - Compose stack deployment for Swarm and Kubernetes apps (`docker stack deploy`)
- Role-based access control for Kubernetes workloads - Role-based access control for Kubernetes workloads
- Blue-Green deployments, for load balancing to different app versions - Blue-Green deployments, for load balancing to different app versions
- Ingress Controllers with Kubernetes L7 routing - Ingress Controllers with Kubernetes L7 routing
- [Pod Security Policies](https://kubernetes.io/docs/concepts/policy/pod-security-policy/) to define a set of conditions that a pod must run with in order to be accepted into the system
- Note: Pod Security Policies are currently `Beta` status in Kubernetes 1.14
- Container Storage Interface (CSI) support
- iSCSI support for Kubernetes
- Non-disruptive Docker Enterprise platform upgrades (blue-green upgrades)
- Experimental features (planned for full GA in subsequent Docker Enterprise releases):
- Kubernetes-native ingress (Istio)
In addition, UCP integrates with Kubernetes by using admission controllers, In addition, UCP integrates with Kubernetes by using admission controllers,
which enable: which enable:
@ -79,7 +81,7 @@ to schedule Kubernetes or Swarm workloads.
- Docker Enterprise manager nodes are both Swarm managers and Kubernetes masters, - Docker Enterprise manager nodes are both Swarm managers and Kubernetes masters,
to enable high availability to enable high availability
- Allocate nodes for Swarm and Kubernetes workloads - Allocate worker nodes for Swarm or Kubernetes workloads (or both)
- Single pane of glass for monitoring apps - Single pane of glass for monitoring apps
- Enhanced Swarm hostname routing mesh with Interlock 2.0 - Enhanced Swarm hostname routing mesh with Interlock 2.0
- One platform-wide management plane: secure software supply chain, secure - One platform-wide management plane: secure software supply chain, secure
@ -89,42 +91,48 @@ to schedule Kubernetes or Swarm workloads.
![](images/docker-ee-overview-3.png){: .with-border} ![](images/docker-ee-overview-3.png){: .with-border}
- Image signing and scanning of Kubernetes apps for validating and verifying content - DTR support for the Docker App format, based on the [CNAB](https://cnab.io) specification
- Image promotion with mirroring between registries - Note: Docker Apps can be deployed to clusters managed by UCP, where they will be displayed as _Stacks_
- Image signing and scanning of Kubernetes and Swarm images and Docker Apps for validating and verifying content
- Image promotion with mirroring between registries as well as Docker Hub
- Define policies for automating image promotions across the app development - Define policies for automating image promotions across the app development
lifecycle of Kubernetes apps lifecycle of Kubernetes and Swarm apps
## Centralized cluster management ### Centralized cluster management
With Docker, you can join up to thousands of physical or virtual machines With Docker, you can join thousands of physical or virtual machines
together to create a container cluster, allowing you to deploy your together to create a cluster, allowing you to deploy your
applications at scale. Docker Enterprise extends the functionality provided by Docker applications at scale. Docker Enterprise extends the functionality provided by Docker
Engine to make it easier to manage your cluster from a centralized place. Engine to make it easier to manage your cluster from a centralized place.
You can manage and monitor your container cluster using a graphical web interface. You can manage and monitor your container cluster using a graphical web interface.
## Deploy, manage, and monitor ### Deploy, manage, and monitor
With Docker Enterprise, you can manage from a centralized place all of the computing With Docker Enterprise, you can manage all of the infrastructure
resources you have available, like nodes, volumes, and networks. resources you have available, like nodes, volumes, and networks, from a central console.
You can also deploy and monitor your applications and services. You can also deploy and monitor your applications and services.
## Built-in security and access control ### Built-in security and access control
Docker Enterprise has its own built-in authentication mechanism with RBAC, so that you can control who can access and make changes to your Docker Enterprise has its own built-in authentication mechanism with role-based access
swarm and applications. Also, Docker Enterprise authentication integrates with LDAP services. control (RBAC), so that you can control who can access and make changes to your
[Learn about role-based access control](access-control/index.md). cluster and applications. Also, Docker Enterprise authentication integrates with LDAP
services and supports SAML SCIM to proactively synchronize with authentication providers.
[Learn about role-based access control](https://docs.docker.com/ee/ucp/authorization/). You can also opt to enable [PKI authentication](https://docs.docker.com/ee/enable-client-certificate-authentication/) to use client certificates, rather than username and password.
![](images/docker-ee-overview-2.png){: .with-border} ![](images/docker-ee-overview-2.png){: .with-border}
Docker Enterprise integrates with Docker Trusted Registry so that you can keep the Docker Enterprise integrates with Docker Trusted Registry so that you can keep the
Docker images you use for your applications behind your firewall, where they Docker images you use for your applications behind your firewall, where they
are safe and can't be tampered with. are safe and can't be tampered with. You can also enforce security policies and only allow running applications
You can also enforce security policies and only allow running applications
that use Docker images you know and trust. that use Docker images you know and trust.
#### Windows Application Security
Windows applications typically require Active Directory authentication in order to communicate with other services on the network. Container-based applications use Group Managed Service Accounts (gMSA) to provide this authentication. Docker Swarm fully supports the use of gMSAs with Windows containers.
## Docker Enterprise and the CLI ## Docker Enterprise and the CLI
Docker Enterprise exposes the standard Docker API, so you can continue using the tools Docker Enterprise exposes the standard Docker API, so you can continue using the tools
@ -174,6 +182,10 @@ KubeDNS is running at https://54.200.115.43:6443/api/v1/namespaces/kube-system/s
To further debug and diagnose cluster problems, use 'kubectl cluster-info dump'. To further debug and diagnose cluster problems, use 'kubectl cluster-info dump'.
``` ```
## Docker Context
A new Docker CLI plugin called `docker context` is available with this release. `docker context` helps manage connections to multiple environments so you do not have to remember and type out connection strings. [Read more](link) about `docker context`.
## Where to go next ## Where to go next
- [Supported platforms](supported-platforms.md) - [Supported platforms](supported-platforms.md)