Docker ee an architecture and operations overview
3 likes660 views
This document summarizes Docker Enterprise Edition (EE) and its integration with Kubernetes. Docker EE provides enterprise-grade features like security, management and automation for production use. It integrates orchestration with Kubernetes and includes components like a private image registry, universal control plane for app and cluster management, and image security scanning. Docker EE allows deploying applications using either Docker Compose or Kubernetes YAML files and supports deploying Kubernetes applications via its UI or CLI while enforcing permissions. It also aims to secure the software supply chain through features like image signing and vulnerability scanning. Upcoming additions to Docker EE include federated application management and enhanced Kubernetes support.
Docker ee an architecture and operations overview
- 1. Docker EE: An Architecture and Operations Overview
- 2. Group Product Manager, Docker @pkennedyr Ryan Kennedy Senior Software Engineer, Docker @anshulpundir Anshul Pundir
- 3. Agenda 1. Docker Enterprise Edition 2.0 2. Kubernetes Integration 3. Securing your Supply Chain 4. Coming soon to Docker EE!
- 4. Enterprise Edition (EE) • Paid Docker subscription • Enterprise-grade features (security, management, automation) • Stable releases for production use • Includes support from Docker • Certified partner ecosystem • Free for “do it yourself” dev & ops • Does not include support • Stable releases for ops • Edge releases for developers Community Edition (CE) Recommended for production use Enterprise & Community Editions
- 5. Docker Enterprise Edition (EE) • Integrated orchestration, security and management • Stable releases with extended support and maintenance • Security patches and hotfixes backported to all supported versions • Enterprise class support (9am-6pm or 24x7x365) • Certified Infrastructure, Containers and Plugins docker enterprise edition CONTAINER PLATFORM FOR THE MODERN APPLICATION SUPPLY CHAIN
- 6. Docker EE Components Public Cloud Virtual Physical docker enterprise edition INTEGRATED SECURITY docker trusted registry image management docker universal control plane app & cluster management docker engine container runtime, orchestration, networking, volumes, plugins CI/CD Images Operating Systems Volumes Monitoring Logging more...
- 8. Docker EE Kubernetes Integration Docker Enterprise Edition Simple and easy to use, production ready Windows support Pods, batch jobs, blue-green deployments, horizontal auto-scaling Swarm Kubernetes Private Image Registry Secure Access and User Management App and Cluster Management Image Security Scanning Content Trust and Verification Policy Management
- 9. Docker EE Kubernetes Integration Swarmkit“Classic” Swarm Docker EE API Classic API Swarm API Kube API Kubernetes CA AuthN AuthZ DCT Metrics Description ● Today’s UCP with additional orchestrator ○ Multi-orchestrator configuration ○ Allocate nodes to each orchestrator ○ “Vanilla” CNCF kube, no wrapping ○ Opinionated stack with “batteries included” networking and storage Feature/Benefits ● Support for Docker and Swarm APIs ● Support for Kubernetes API ● EE features including LDAP/AD, RBAC, Scanning, Signing Enforcement, Security Policies, etc.
- 10. Single Platform, Many Teams Node Worker Node Worker Node Worker Node Worker swarm mode cluster docker universal control plane trusted registry Node Worker Node Worker .NET Dev Team Using Swarm Java Dev Team using K8s Java Dev Team Using Swarm Ops Team
- 11. Deploy Kubernetes Apps via UI or CLI • Docker EE uses standard Kube API and CLI • Use UCP UI to upload yaml files for deploying Kube workloads • Both methods enforce permissions and limit unauthorized access −Client bundle to connect local client to UCP controller with user certs available now
- 12. Deploy Applications with Either Compose or Kubernetes YAML Docker Compose Kubernetes YAML Node NodeNode Node • Simple Compose spec for developers, IT ops have multiple options for deployment • Migrate existing Docker apps to Kubernetes at your own pace KEY BENEFITS • Use existing Docker Compose files and choose at runtime to deploy on either Swarm or Kubernetes FEATURE / CAPABILITY available now
- 14. v Docker EE Secure Supply Chain
- 16. <code> Developer Automated tests Packaging Smoke tests QA Prod Image signing (Docker Content Trust) Image security scanning Software Supply Chain
- 17. Image Signing with Docker Content Trust Sign image to “approve” passing of each stage CI SECURITY SCANNING STAGING PRODUCTION Policy to check for signatures before deployment available now
- 18. Image Vulnerability Scanning • Integrated security scanning and vulnerability monitoring with customized alerts • Binary level scanning provides deep visibility into all components • Works both online and offline − Great for air gapped scenarios • Scans both Linux (x86_64) and Windows available now
- 19. Image Distribution Image Content Cache docker dtr docker dtr slow fast repo / dtr dev repo / dtr stage Image MirroringImage Promotions dtr dev / qa / staging / prod / available now
- 21. promote mirror <code> Development sign & push Software Supply Chain Demo qa / hub dtr dev / qa / Local QA Remote QA
- 22. v Coming to Docker EE!
- 23. Federated Application Management FEATURES coming soon 23 ● Federated application management plane ● Multi-cluster management ● Shared authentication backend (LDAP, AD) ● Common automation & governance system BENEFITS ● Enable faster hybrid cloud & multi-cloud adoption ● Centralized supply chain DOCKER ENTERPRISE EDITION Federated Application Management EE EE Azure (AKS) Google (GKE)
- 24. Enhanced Kubernetes Support coming soon • Windows Server 2019 support • Kubernetes RBAC support • Container Storage Interface (CSI) support • Built-in volume types (AWS EBS, Azure File, Azure Disk) • Latest Kubernetes versions
- 25. ● Docker EE 2.0 (Available Now) ● Kubernetes Support (Available Now) ← docker.com/kubernetes ○ Production-grade Kube for Ops with Docker EE ○ Secure supply chain for Kube workloads ● Other Sessions to Attend: ○ “Gordon’s Secret Session” (Wed 4:30pm) ○ “Kubernetes with Docker” (Wed 5:25pm) ○ “Modernizing Traditional Applications with Docker” (Thurs 11:00am) ○ “Networking in Docker EE with Kubernetes & Swarm” (Thurs 2:05pm) ○ “Docker Storage, Designing a Platform for Persistent Data” (Thurs 3:50pm) In Summary ...
- 26. Docker EE Hosted Demo ● Free 12 Hour Demo ● No Servers Required ● Full Docker EE Cluster Access (GA Version) docker.com/trial
- 27. ● Federated Application Management ● Kubernetes on Windows ● and more ... beta.docker.com