If I create nodes in Azure, how ‘managed’ will they be? i.e. will I still have to worry about security and updates/upgrades on the VM in Azure, or will Docker somehow look after that for me?
If its BYON then you need to run the updates.
If you deploy the nodes through Docker Cloud, then it will run Docker Cloud’s image. And it will ask you to update the docker version every so often, but apart from that you don’t need to worry about it.