<a id="security-with-docker"></a>

# Deploy Secure Confluent Platform Docker Images

Confluent Platform supports cluster encryption and authentication, including a mix of authenticated and unauthenticated,
and encrypted and non-encrypted clients. Using security with your Kafka clusters is optional, but Confluent recommends enabling it.

All Confluent Platform security features are supported on the Confluent Platform Docker images.

For details on the available security features in Confluent Platform, see the [Confluent Platform Security
Overview Documentation](../../security/overview.md#security).

## Manage secrets

To pass secrets to a Confluent Platform container, mount a host directory that
contains the secrets onto the container’s secrets volume. The images
read credentials, certificates, keytabs, Kerberos configuration, and
other secret files from this mounted directory. For step-by-step
configuration, see [Configuring secrets for Docker](../../security/compliance/secrets/overview.md#secrets-docker).

## Use TLS/SSL

For a tutorial on using TLS/SSL in Confluent Platform, see [Scripted Confluent Platform Demo](../../tutorials/cp-demo/index.md#cp-demo).

## Use audit logging

For details about how to configure audit logging in Docker containers, see
[Configure audit logs in Docker](../../security/compliance/audit-logs/audit-logs-properties-config.md#audit-logging-docker).

## Use OAuth

Starting with Confluent Platform 8.3, you can bring your own identity and configure OAuth 2.0 with Confluent Platform.
For more information, see [Use SASL/OAUTHBEARER Authentication Between Confluent Server Brokers and Kafka Clients in Confluent Platform](../../security/authentication/sasl/oauthbearer/overview.md#cp-oauth-authentication).

For an example that shows how to configure OAuth with Confluent Platform running in Docker,
see [OAuth in Confluent Platform](https://github.com/confluentinc/cp-all-in-one/tree/latest/cp-all-in-one-security/oauth)
on GitHub.

## Related content

- [Scripted Confluent Platform Demo](../../tutorials/cp-demo/index.md#cp-demo)
- [Manage Security in Confluent Platform](../../security/overview.md#security)