The agent authentication prerequisite rendered as a standalone paragraph beneath the platform-specific prerequisite lists. Add it to each platform tab so it appears as part of the selected platform's list.
Co-Authored-By: Claude <noreply@anthropic.com>
## Summary
- Adds OpenAPI 3.0 spec and API reference page for the Docker Enterprise
Data API at `/reference/api/enterprise-data/`
- Adds feature guide for enterprise usage reports at
`/manuals/enterprise/reports/`
## Context
Docker Enterprise subscribers will be able to programmatically export
organization usage reports (pull data) via
`api.docker.com/enterprise-data/v1/`. This is a new API surface,
separate from the Hub API, supporting both PAT and OAT authentication.
Related PRs:
- API implementation:
[docker/data-platform#817](https://github.com/docker/data-platform/pull/817)
- FGA scope for OAT auth:
[docker/iam-services#1029](https://github.com/docker/iam-services/pull/1029)
## New pages
| Path | Description |
|---|---|
| `/reference/api/enterprise-data/api.yaml` | OpenAPI 3.0 spec (4
endpoints: list types, list reports, download, schema) |
| `/reference/api/enterprise-data/index.md` | API reference landing page
|
| `/manuals/enterprise/reports/_index.md` | Feature guide with auth
setup, curl walkthrough, pagination, troubleshooting |
## Test plan
- [ ] API reference renders correctly at
`/reference/api/enterprise-data/`
- [ ] Feature guide renders in the Enterprise sidebar
- [ ] curl examples are copy-pasteable and accurate
🤖 Generated with [Claude Code](https://claude.com/claude-code)
---------
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: Alexa <alexa.kristensen@docker.com>
## Description
Clarifies that GitHub's immutable identifiers in the default subject
claim are now described as the current behavior for repositories created
after July 15, 2026.
## Related issues or tickets
Fixes#25621
## Reviews
- [x] Technical review
- [x] Editorial review
- [ ] Product review
---------
Co-authored-by: Alexa Kristensen <81787716+akristen@users.noreply.github.com>
## Summary
Document the DSR option for Linux east-west overlay traffic and restore
the legacy overlay tutorial redirect.
Closes#9652
Generated by Codex
Co-authored-by: Codex <noreply@openai.com>
Updates the Gordon data privacy page:
- **Paid subscriptions**: zero retention now explicitly covers all paid
subscriptions — Docker Desktop plans (Pro, Team, Business) and Gordon
plans (Plus, Max, Ultra).
- **Personal (free) subscription**: retention of anonymized conversation
threads reduced from 30 days to 5 days; purpose clarified (quality of
service and abuse prevention).
- **All subscriptions**: documents that Docker's third-party AI
providers operate under zero-data-retention agreements.
- **New section — Sensitive data protection**: documents Gordon's
automatic secret/PII redaction based on
[docker/portcullis](https://github.com/docker/portcullis).
Bare relative links in collapsed guides resolved to the guides landing page.
Replace them with same-page anchors and remove one link to a deleted topic.
Co-Authored-By: Codex <noreply@openai.com>
Resolver libraries can query multiple DNS servers differently, making results depend on the container network and runtime. Add a note distinguishing application-controlled lookups on the default bridge from Docker's ordered upstream lookups on custom networks.
Co-Authored-By: Codex <noreply@openai.com>
The read-only volume section incorrectly described the mount as a bind mount.
Refer to the mounted data as a volume and remove the host propagation claim.
Co-Authored-By: Codex <noreply@openai.com>
The seccomp guide did not explain where relative profile paths are resolved or which host must contain the file. Document that the Docker CLI resolves and reads the path before sending the profile contents to the daemon.
Co-Authored-By: Codex <noreply@openai.com>
The overlay networking docs omitted the supported DSR driver option. Document Linux east-west DSR usage and restore the legacy tutorial redirect.
Co-Authored-By: Codex <noreply@openai.com>
<!--Delete sections as needed -->
## Description
Updated DHI policy enforcement docs to use Docker Scout local policies.
Reworks the DHI "enforce image usage" topic to use the new `docker scout
policy` local policy CLI with the hosted DHI policy bundle
(`dhi/policies:latest`), instead of the dashboard-based policy workflow.
Changes:
- Rewrites `dhi/how-to/policies.m`d around evaluating your own images
against the DHI policy bundle via `--policy-bundle`, including a local
build-and-evaluate example and a working GitHub Actions CI workflow.
- Reframes the topic to reflect what the bundle actually checks —
DHI-grade security/compliance standards, not whether an image is a DHI.
- Adds a link to the policies repo
(`https://github.com/docker-hardened-images/policies`) in DHI additional
resources.
- Updates the how-to grid card to match.
https://deploy-preview-25564--docsdocker.netlify.app/dhi/how-to/policies/
## Related issues or tickets
ENGDOCS-3346
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
---------
Signed-off-by: Craig Osterhout <craig.osterhout@docker.com>
<!--Delete sections as needed -->
## Description
Update the description of the per-user install mode on Windows to remove
the 'Beta' label and confirm it is now the default in the installer UI.
## Related issues or tickets
https://docker.atlassian.net/browse/DKP-2137
## Reviews
The Docker Desktop changes related to this are going live in 4.83.0
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
<!--Delete sections as needed -->
## Description
<!-- Tell us what you did and why -->
## Related issues or tickets
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
Signed-off-by: aevesdocker <allie.sadler@docker.com>
<!--Delete sections as needed -->
## Description
<!-- Tell us what you did and why -->
## Related issues or tickets
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
---------
Signed-off-by: aevesdocker <allie.sadler@docker.com>
The --clone docs blurred the standalone sandbox clone with the read-only host mount and agent-managed worktrees.
Clarify the filesystem locations and explain that branch and worktree behavior depends on the agent tool.
Co-Authored-By: Codex <noreply@openai.com>
## Description
Updates the Docker Offload idle timeout link to point to the existing
session management and idle state section.
## Related issues or tickets
Closes#25591
## Summary
- **Duplication audit** — Confirmed the six product-access procedures
(Desktop, Hub, Build Cloud, Scout, Testcontainers Cloud, Offload) are
unique to this page; not duplicated in `enterprise/security/`,
`offload/`, or `scout/` docs.
- **Restructuring** — Removed the `{{< tabs >}}` widget (wrong pattern
since admins need all six products, not one-of-many) in favor of flat
H3s per product. Dropped redundant "Manage" from each H3 title.
Converted the "Monitor product usage" bullet list into a table. Moved
the top-of-page manual links into a new "What's next" section at the
bottom. Rewrote the intro to state the page's actual job (access control
+ usage monitoring) in 2 sentences.
- **Validation performed** — Formatted with prettier, and linted clean
with markdownlint and Vale (`docker buildx bake vale`). No content/link
accuracy check against live product UIs was done — that would need
separate manual verification.
- **Validated UI steps** — Followed procedures to confirm steps were
still fresh
## Notes on editorial changes
- **"As an organization owner" wasn't dropped, it was consolidated.**
Each
product's access-management subsection previously repeated the phrase.
It
now appears once in the "Control access for your organization" intro,
since it applies to every procedure that follows. This cuts redundancy
without losing the permission requirement, and the page's placement in
the `admin/organization/` IA already implies owner-level context.
- **Docker Home routing for Build Cloud and Scout is intentional, not a
regression.** Most users land on Docker Home first and navigate to these
dashboards from there. The direct links to `app.docker.com/build` and
`scout.docker.com` are preserved, but calling out the Docker Home path
adds discoverability for the common case. It's called out explicitly
here because these two flows leave `app.docker.com` entirely, unlike the
other products where the context switch is implied.
- **The "select the menu icon" step for Testcontainers Cloud reflects
real
usability friction.** During testing, this menu icon was hard to locate.
Naming it explicitly orients users who'd otherwise miss it.
---------
Co-authored-by: Cursor <cursoragent@cursor.com>
## Summary
The admin > organization **Setup** and **Manage** section landing pages
(`_index.md`) were hidden stubs (`build: render: never`). Because Hugo
doesn't
publish those pages, the sidebar rendered both sections as
non-clickable,
expand-only entries. This PR turns them into proper overview pages that
follow
the pattern used by sibling section overviews (Organization, Company,
etc.).
- Add front matter (`title`, `linkTitle`, `description`, `keywords`) and
a grid
of child-page cards to both pages, so they render and become clickable
in the
sidebar.
- Add a short overview of the setup phases (create/convert, onboard,
maintain)
that clarifies which tasks are sequential and which aren't.
- Add a seats-vs-licenses comparison table to the Manage overview to
distinguish
the two entitlements.
---------
Co-authored-by: Cursor <cursoragent@cursor.com>
> 🤖 **Automated implementer agent** — *this comment was posted by the
implementer bot from Docker Agentic Platform, not by a human developer*
Adds `https://api.offload.docker.com` to the Desktop allowlist table.
This endpoint is required for Docker Offload to function in environments
with a restricted firewall. The new row follows the existing table
conventions (plain-text description, matching column alignment).
**Testing:** Markdown table structure verified; no internal links
introduced.
Co-authored-by: Nicolas Beck <nico1510@users.noreply.github.com>
## Description
Correct the private marketplace guide's single `admins-settings.json`
reference to `admin-settings.json`, matching the generated filename used
throughout the page.
Fixes#25577.
## Validation
- `scripts/lint.sh content/manuals/extensions/private-marketplace.md` —
Markdown lint passed; Vale was unavailable locally
- `git diff --check`
<!--Delete sections as needed -->
## Description
<!-- Tell us what you did and why -->
## Related issues or tickets
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
Signed-off-by: aevesdocker <allie.sadler@docker.com>
## Summary
Simplifies the `/admin` category by removing duplicated content and
reframing it around Docker Home. Concepts now live on overview pages;
procedures live on one management page per level.
- **`admin/_index.md`**: Reframed around Docker Home (retired the Admin
Console framing); trimmed the hierarchy section.
- **`company/_index.md`**: Dropped duplicated "Key features," made it
the canonical home for the company owner concept, and collapsed the
Manage/SSO/SCIM grid cards.
- **`company/manage.md`**: Merged the three `manage/` pages into one
leaf page (aliases preserved) so all company procedures live in one
place.
- **`organization/_index.md`**: Streamlined members and consolidated the
grid to four entry points; fixed broken/linkless cards.
- **Cross-links & FAQ**: Added company/org cross-links, trimmed
`company-faqs.md` to point at canonical concepts, and relabeled the
create page to "Setup."
## To do
- [x] **Validate seat avoidance for company owners** — the unverified
"keep access without a seat" workaround was removed; confirm the real
behavior and document or drop it.
- [x] **Admin Console audit (separate PR)** — sweep `/admin` for stale
navigation, `app.docker.com/admin` links, and menu labels now that it's
not part of Docker Home.
- [x] **Link "Docker Home" consistently** across overview pages.
- [x] **Verify anchors/aliases** in the built site before merge.
---------
Co-authored-by: Cursor <cursoragent@cursor.com>
Billing's sidebar labels were wordier than the rest of the docs. Across
`content/manuals`, 74% of linkTitles are 1–2 words and 82% are
noun-based —
billing's were all 3–4 word verb phrases repeating "billing".
Co-authored-by: Cursor <cursoragent@cursor.com>
Reorder the sbx get-started page to lead with value for first-time users:
run an agent, see how the sandbox isolates it, then control network access.
Move clone mode and the interactive dashboard into "What's next", add an
isolation payoff section, and drop the rm --force detour.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
