OKDP logoOKDP

OKDP 1.0

Every component in this release, the version it ships, and where it comes from.

27 components · 13 upstream charts used unmodified

Data services11

The services users run: query engines, notebooks, orchestration and BI.

Apache Airflow
3.2.1
3.2.1-p07
Upstream chart
airflow 1.21.0

Apache Airflow 3.2.1 - Workflow orchestration platform with Spark Operator integration

quay.io/okdp/platform-packages/airflow:3.2.1-p07

Included references

  • quay.io/adaltas/oidc-dcr:0.3.2
  • airflow:1.21.0 (https://airflow.apache.org)
Apache Polaris
1.3.0-incubating
1.3.0-incubating-p07
Upstream chart
polaris 1.3.0-incubating

Apache Polaris is an open-source, fully-featured catalog for Apache Iceberg™.

quay.io/okdp/platform-packages/polaris:1.3.0-incubating-p07

Included references

  • quay.io/okdp/charts/polaris-admin:1.0.0
  • polaris:1.3.0-incubating (https://downloads.apache.org/incubator/polaris/helm-chart/)
  • quay.io/okdp/charts/polaris-console:0.1.0
  • docker.io/apache/polaris-admin-tool:1.3.0-incubating
  • docker.io/apache/polaris:1.3.0-incubating
  • docker.io/curlimages/curl:8.18.0
  • quay.io/okdp/polaris-console:v0.1.1
Apache Superset
6.0.0
6.0.0-p05
OKDP chartOKDP image
superset 0.15.2-2.0

Enterprise business intelligence platform for modern data teams.

quay.io/okdp/platform-packages/superset:6.0.0-p05

Included references

  • quay.io/okdp/charts/superset:0.15.2-2.0
  • quay.io/okdp/superset:6.0.0
  • quay.io/okdp/superset:6.0.0-dockerize
  • quay.io/okdp/superset:6.0.0-websocket
  • docker.io/library/postgres:16-alpine
Hive Metastore
4.0.1
4.0.1-p02
OKDP chartOKDP image
hive-metastore 1.4.0

Hive Metastore is a centralized metadata repository for data lakes and big data analytics.

quay.io/okdp/platform-packages/hive-metastore:4.0.1-p02

Included references

  • quay.io/okdp/charts/hive-metastore:1.4.0
  • quay.io/okdp/hive-metastore:4.0.1
JupyterHub
4.3.3
4.3.3-p06
Upstream chartOKDP image
jupyterhub 4.3.3

Multi-user interactive development environment for data science and machine learning.

quay.io/okdp/platform-packages/jupyterhub:4.3.3-p06

Included references

  • quay.io/okdp/charts/spark-rbac:1.0.1
  • jupyterhub:4.3.3 (https://hub.jupyter.org/helm-chart/)
  • quay.io/okdp/jupyter/minimal-notebook:python-3.12.12-hub-5.4.2-lab-4.5.0
  • quay.io/okdp/jupyter/scipy-notebook:python-3.12.12-hub-5.4.2-lab-4.5.0
  • quay.io/okdp/jupyter/datascience-notebook:python-3.12.12-hub-5.4.2-lab-4.5.0
  • quay.io/okdp/jupyter/all-spark-notebook:spark-3.4.4-python-3.11-java-17-scala-2.12
  • quay.io/okdp/jupyter/all-spark-notebook:spark-3.5.6-python-3.11-java-17-scala-2.12
OKDP Examples
1.2.0
1.3.0-p08
OKDP chartOKDP image
okdp-examples 1.3.0

Reference notebooks, datasets and OPA policies used by the sandbox.

quay.io/okdp/platform-packages/okdp-examples:1.3.0-p08

Included references

  • quay.io/okdp/charts/okdp-examples:1.3.0
  • quay.io/okdp/okdp-examples:1.2.0
Spark Defaults
1.0.0
1.0.0-p01
OKDP chart
spark-defaults 1.0.0

Shared Spark configuration applied to every Spark application.

quay.io/okdp/platform-packages/spark-defaults:1.0.0-p01

Included references

  • quay.io/okdp/charts/spark-defaults:1.0.0
Spark History Server
3.5.1
3.5.1-p08
OKDP chartOKDP image
spark-history-server 1.0.0

Monitoring and debugging interface for Apache Spark applications.

quay.io/okdp/platform-packages/spark-history-server:3.5.1-p08

Included references

  • quay.io/okdp/charts/spark-history-server:1.0.0
  • quay.io/okdp/charts/spark-web-proxy:0.1.0
  • quay.io/okdp/spark:spark-3.5.6-scala-2.12-java-17
  • quay.io/okdp/spark-web-proxy:0.2.1
Spark Operator
2.4.0
2.4.0-p04
Upstream chart
spark-operator 2.4.0

Spark Operator 2.4.0 - Kubernetes operator for managing Apache Spark applications

quay.io/okdp/platform-packages/spark-operator:2.4.0-p04

Included references

  • spark-operator:2.4.0 (https://kubeflow.github.io/spark-operator)
Spark RBAC
1.0.1
1.0.1-p02
OKDP chart
spark-rbac 1.0.1

Namespace roles and bindings letting Spark applications run in a project.

quay.io/okdp/platform-packages/spark-rbac:1.0.1-p02

Included references

  • quay.io/okdp/charts/spark-rbac:1.0.1
Trino
480
480.0.0-p21
Upstream chart
trino v1.42.1

Distributed SQL query engine designed for large-scale data processing across multiple data sources.

quay.io/okdp/platform-packages/trino:480.0.0-p21

Included references

  • opa-kube-mgmt:11.0.7 (https://open-policy-agent.github.io/kube-mgmt/charts)
  • quay.io/okdp/charts/opal-secrets:0.1.1
  • opal:0.0.30 (https://permitio.github.io/opal-helm-chart)
  • quay.io/adaltas/oidc-dcr:0.3.2
  • trino:v1.42.1 (https://trinodb.github.io/charts/)
  • docker.io/openpolicyagent/opa:1.16.1
  • docker.io/permitio/opal-client-standalone:0.9.4
  • docker.io/permitio/opal-server:0.9.4
  • docker.io/trinodb/trino:480

Control plane2

OKDP's own automation layer: the API server and the web console.

OKDP Control Plane Console
0.7.0
0.7.0-p01
OKDP chart
okdp-control-plane-ui 0.7.0

Frontend web interface for the Open Kubernetes Data Platform

quay.io/okdp/platform-packages/okdp-control-plane-ui:0.7.0-p01

Included references

  • quay.io/okdp/charts/okdp-control-plane-ui:0.7.0
OKDP Control Plane Server
0.7.1
0.7.1-p02
OKDP chart
okdp-control-plane-server 0.7.1

API backend for the Open Kubernetes Data Platform

quay.io/okdp/platform-packages/okdp-control-plane-server:0.7.1-p02

Included references

  • quay.io/okdp/charts/okdp-control-plane-server:0.7.1

Sandbox dependencies14

Cluster services OKDP relies on: identity, storage, certificates and ingress.

cert-manager
1.17.1
1.17.1-p08
Upstream chart
cert-manager v1.17.1
quay.io/okdp/sandbox-dependencies/cert-manager:1.17.1-p08

Included references

  • cert-manager:v1.17.1 (https://charts.jetstack.io)
  • trust-manager:v0.16.0 (https://charts.jetstack.io)
  • quay.io/okdp/charts/cert-issuers:0.2.0
CloudNativePG
1.29.1
1.29.1-p01
Upstream chart
cloudnative-pg 0.28.0

CloudNativePG is the Kubernetes operator that covers the full lifecycle of a highly available PostgreSQL database cluster

quay.io/okdp/sandbox-dependencies/cloudnative-pg:1.29.1-p01

Included references

  • cloudnative-pg:0.28.0 (https://cloudnative-pg.github.io/charts/)
  • ghcr.io/cloudnative-pg/cloudnative-pg:1.29.1
CoreDNS patch
1.0.0
1.0.0-p05
OKDP chartOKDP image
coredns-patch 0.1.0

Rewrites cluster DNS so platform hostnames resolve inside the sandbox.

quay.io/okdp/sandbox-dependencies/coredns-patch:1.0.0-p05

Included references

  • quay.io/okdp/charts/coredns-patch:0.1.0
  • quay.io/okdp/sandbox-images/kubectl:latest
DNS server
1.0.0
1.0.0-p04
OKDP chart
dns-server 1.0.0

dnsmasq resolver serving the sandbox ingress suffix.

quay.io/okdp/sandbox-dependencies/dns-server:1.0.0-p04

Included references

  • quay.io/okdp/charts/dns-server:1.0.0
  • docker.io/4km3/dnsmasq:2.90-r3
External Secrets Operator
0.15.1
0.15.1-p03
Upstream chart
external-secrets 0.15.1

External Secrets Operator synchronizes secrets from external APIs (HashiCorp Vault, AWS Secrets

quay.io/okdp/sandbox-dependencies/external-secrets:0.15.1-p03

Included references

  • external-secrets:0.15.1 (https://charts.external-secrets.io)
HashiCorp Vault
0.29.1
0.29.1-p03
Upstream chart
vault 0.29.1

HashiCorp Vault, the secret backend a SecretStore points at. Runs in dev mode by default,

quay.io/okdp/sandbox-dependencies/vault:0.29.1-p03

Included references

  • vault:0.29.1 (https://helm.releases.hashicorp.com)
Ingress NGINX
4.12.1
4.12.1-p03
Upstream chart
ingress-nginx 4.12.1
The Kubernetes project retired Ingress NGINX in March 2026; it receives no further releases, bugfixes or security updates. OKDP 1.0 ships it deliberately and existing deployments keep working. The migration path, whether Gateway API or another controller, will be decided after 1.0.

NGINX Ingress Controller for Kubernetes with support for multiple deployment modes

quay.io/okdp/sandbox-dependencies/ingress-nginx:4.12.1-p03

Included references

  • ingress-nginx:4.12.1 (https://kubernetes.github.io/ingress-nginx)
Keycloak
26.1.3
24.4.11-p16
Upstream chartOKDP image
keycloak 24.4.11

Keycloak identity and access management for Kubernetes

quay.io/okdp/sandbox-dependencies/keycloak:24.4.11-p16

Included references

  • registry-1.docker.io/bitnamicharts/keycloak:24.4.11
  • quay.io/okdp/sandbox-images/keycloak:26.1.3-debian-12-r0
  • quay.io/okdp/sandbox-images/keycloak-config-cli:6.4.0-debian-12-r0
kubauth
0.3.0-snapshot
0.3.0-snapshot-p03
Upstream chart
kubauth 0.3.0-snapshot

OIDC authentication for kubectl against the platform identity provider.

quay.io/okdp/sandbox-dependencies/kubauth:0.3.0-snapshot-p03

Included references

  • quay.io/kubauth/charts/kubauth:0.3.0-snapshot
KuboCD webhooks
v0.3.2
v0.3.2-p01
Upstream chart
kubocd-wh v0.3.2

Admission webhooks backing the KuboCD Release and Context resources.

quay.io/okdp/sandbox-dependencies/kubocd-webhooks:v0.3.2-p01

Included references

  • quay.io/kubocd/charts/kubocd-wh:v0.3.2
Local secrets provider
1.0.0
1.0.0-p06
OKDP chart
local-secrets-provider 0.1.0

Generates sandbox credentials in-cluster, standing in for a real vault.

quay.io/okdp/sandbox-dependencies/local-secrets-provider:1.0.0-p06

Included references

  • quay.io/okdp/charts/local-secrets-provider:0.1.0
Platform tools
1.0.0
1.0.0-p01
Upstream chart
reloader 1.0.72

Reloader, kubernetes-replicator and secret-generator, bundled as one package.

quay.io/okdp/sandbox-dependencies/tools:1.0.0-p01

Included references

  • reloader:1.0.72 (https://stakater.github.io/stakater-charts)
  • kubernetes-replicator:2.9.2 (https://helm.mittwald.de)
  • kubernetes-secret-generator:3.4.0 (https://helm.mittwald.de)
PostgreSQL
18.3
18.3-p03
OKDP chart
cnpg-postgresql 0.1.0

PostgreSQL clusters provisioned through CloudNativePG.

quay.io/okdp/sandbox-dependencies/cnpg-postgresql:18.3-p03

Included references

  • quay.io/okdp/charts/cnpg-postgresql:0.1.0
  • ghcr.io/cloudnative-pg/postgresql:18.3
SeaweedFS
4.17.0
4.17.0-p08
Upstream chart
seaweedfs 4.17.0

S3-compatible object store backing the lakehouse in the sandbox.

quay.io/okdp/sandbox-dependencies/seaweedfs:4.17.0-p08

Included references

  • quay.io/okdp/charts/seaweedfs-auth-config:1.1.0
  • seaweedfs:4.17.0 (https://seaweedfs.github.io/seaweedfs/helm)
  • quay.io/okdp/charts/seaweedfs-provisioning:1.0.0

Built from platform-packages@082e702 (September 4, 2026), sandbox-dependencies@12bb63a (August 28, 2026).