<p>On <a href="https://www.docker.com/dockercon/" rel="nofollow noreferrer">DockerCon 2019</a> Docker announced the Docker Kubernetes Service (DKS). </p>

<p>Quoted from <a href="https://www.infoworld.com/article/3391214/docker-enterprise-30-integrates-secure-kubernetes-stack.html" rel="nofollow noreferrer">here</a>:</p>

<blockquote>
  <p>Docker Enterprise 3.0’s Docker Kubernetes Service (DKS) integrates
  Kubernetes container orchestration from the developer desktop to the
  production server.</p>
  
  <p>...It also provides an automated way to install and configure
  Kubernetes applications across hybrid and multi-cloud deployments.
  Other capabilities include security, access control, and lifecycle
  management</p>
</blockquote>

<p>And from <a href="https://www.docker.com/products/kubernetes" rel="nofollow noreferrer">here</a>:</p>

<blockquote>
  <p>The Docker platform includes a secure and fully-conformant Kubernetes
  environment for developers and operators of all skill levels,
  providing out-of-the-box integrations for common enterprise
  requirements while still enabling complete flexibility for expert
  users.</p>
</blockquote>

<p>After some searching and research I haven't succeed to fully understand the different solutions and features that DKS has to offer. So, my question is: <br>
<strong>What DKS has to offer regarding topics like: Security, Networking, Access Management, etc'</strong>? </p>

<p>I'll start with what I discovered so far as an entry point for the discussion, hopefully that others will share there own understanding and experience and maybe provide some references and examples.</p>

Rotem jackoby
<p>This is very basic - but I'll share what I found so far - starting with the <a href="https://www.docker.com/products/kubernetes" rel="nofollow noreferrer">product page</a> as my entry point for research.</p>

<p><strong>Security</strong></p>

<ol>
<li><p>Secure Kubernetes cluster with <a href="https://docs.docker.com/compliance/nist/fips140_2/" rel="nofollow noreferrer">TLS authentication and encryption</a>.</p></li>
<li><p>Integrated security for the application lifecycle with <a href="https://docs.docker.com/engine/security/trust/content_trust/" rel="nofollow noreferrer">Docker Content Trust</a>.</p></li>
<li><p>Integration with <a href="https://hub.docker.com/search/?q=&amp;type=image&amp;certification_status=certified" rel="nofollow noreferrer">validated and certified 3rd party tools</a>  (monitoring, logging, storage, 
networking, etc') .</p></li>
</ol>

<p><strong>Access control</strong></p>

<ol>
<li>Restricting visibility for different user groups and operate multi-tenant environments - I found only this: <a href="https://docs.docker.com/ee/ucp/admin/configure/restrict-services-to-worker-nodes/#kubernetes-workloads" rel="nofollow noreferrer">restrict services to worker nodes</a>.</li>
<li>Advanced Access Controls Docker Enterprise includes integrated RBAC that works with corporate LDAP, Active Directory, PKI certificates and/or SAML 2.0 identity provider solutions - I found only this: <a href="https://docs.docker.com/ee/ucp/admin/configure/configure-rbac-kube/" rel="nofollow noreferrer">Configure native Kubernetes role-based access control</a>.</li>
</ol>

<p><strong>Networking</strong></p>

<p>Found only <a href="https://docs.docker.com/ee/ucp/kubernetes/install-cni-plugin/" rel="nofollow noreferrer">this</a> which is related to installation of cni plugins. <br>
I think DKS offers much more regarding to integrating with 3rd party networking solutions  - Quoted from the product page:</p>

<blockquote>
  <p>Out-of-the-box Networking Docker Enterprise includes Project Calico by
  Tigera as the “batteries included” Kubernetes CNI plug-in for a highly
  scalable, networking and routing solution. Get access to overlay
  (IPIP), no overlay, and hybrid data-plane networking models in
  addition to native Kubernetes ingress controllers for load balancing.</p>
</blockquote>
