OKDP logoOKDP

OKDP 1.1

Every component in this release, the version it ships, and where it comes from.

27 components · 13 upstream charts used unmodified

Data services11

The services users run: query engines, notebooks, orchestration and BI.

Apache Airflow
3.2.1
3.2.1-1.0.1
Upstream chart
airflow 1.21.0

Apache Airflow 3.2.1 - Workflow orchestration platform with Spark Operator integration

quay.io/okdp/platform-packages/airflow:3.2.1-1.0.1

Included references

  • quay.io/adaltas/oidc-dcr:0.3.2
  • airflow:1.21.0 (https://airflow.apache.org)
Apache Polaris
1.3.0-incubating
1.3.0-incubating-2.0.0
Upstream chart
polaris 1.3.0-incubating

Apache Polaris is an open-source, fully-featured catalog for Apache Iceberg™.

quay.io/okdp/platform-packages/polaris:1.3.0-incubating-2.0.0

Included references

  • quay.io/okdp/charts/polaris-admin:1.0.0
  • polaris:1.3.0-incubating (https://downloads.apache.org/incubator/polaris/helm-chart/)
  • quay.io/okdp/charts/polaris-console:0.2.0
  • docker.io/apache/polaris-admin-tool:1.3.0-incubating
  • docker.io/apache/polaris:1.3.0-incubating
  • docker.io/curlimages/curl:8.18.0
  • quay.io/okdp/polaris-console:v0.1.1
Apache Superset
6.0.0
6.0.0-1.1.0
OKDP chartOKDP image
superset 0.15.2-2.0

Enterprise business intelligence platform for modern data teams.

quay.io/okdp/platform-packages/superset:6.0.0-1.1.0

Included references

  • quay.io/okdp/charts/superset:0.15.2-2.0
  • quay.io/okdp/superset:6.0.0
  • quay.io/okdp/superset:6.0.0-dockerize
  • quay.io/okdp/superset:6.0.0-websocket
  • docker.io/library/postgres:16-alpine
Hive Metastore
4.0.1
4.0.1-1.0.1
OKDP chartOKDP image
hive-metastore 1.4.0

Hive Metastore is a centralized metadata repository for data lakes and big data analytics.

quay.io/okdp/platform-packages/hive-metastore:4.0.1-1.0.1

Included references

  • quay.io/okdp/charts/hive-metastore:1.4.0
  • quay.io/okdp/hive-metastore:4.0.1
JupyterHub
4.3.3
4.3.3-1.0.1
Upstream chartOKDP image
jupyterhub 4.3.3

Multi-user interactive development environment for data science and machine learning.

quay.io/okdp/platform-packages/jupyterhub:4.3.3-1.0.1

Included references

  • quay.io/okdp/charts/spark-rbac:1.0.1
  • jupyterhub:4.3.3 (https://hub.jupyter.org/helm-chart/)
  • quay.io/okdp/jupyter/scipy-notebook:python-3.12.12-hub-5.4.2-lab-4.5.0
  • quay.io/okdp/jupyter/datascience-notebook:python-3.12.12-hub-5.4.2-lab-4.5.0
  • quay.io/okdp/jupyter/all-spark-notebook:spark-3.4.4-python-3.11-java-17-scala-2.12
  • quay.io/okdp/jupyter/all-spark-notebook:spark-3.5.6-python-3.11-java-17-scala-2.12
OKDP Examples
1.2.0
1.3.0-1.0.1
OKDP chartOKDP image
okdp-examples 1.3.0

Reference notebooks, datasets and OPA policies used by the sandbox.

quay.io/okdp/platform-packages/okdp-examples:1.3.0-1.0.1

Included references

  • quay.io/okdp/charts/okdp-examples:1.3.0
  • quay.io/okdp/okdp-examples:1.2.0
Spark Defaults
1.0.0
1.0.0-1.0.1
OKDP chart
spark-defaults 1.0.0

Shared Spark configuration applied to every Spark application.

quay.io/okdp/platform-packages/spark-defaults:1.0.0-1.0.1

Included references

  • quay.io/okdp/charts/spark-defaults:1.0.0
Spark History Server
3.5.1
3.5.1-1.0.1
OKDP chartOKDP image
spark-history-server 1.0.0

Monitoring and debugging interface for Apache Spark applications.

quay.io/okdp/platform-packages/spark-history-server:3.5.1-1.0.1

Included references

  • quay.io/okdp/charts/spark-history-server:1.0.0
  • quay.io/okdp/charts/spark-web-proxy:0.1.0
  • quay.io/okdp/spark:spark-3.5.6-scala-2.12-java-17
  • quay.io/okdp/spark-web-proxy:0.2.1
Spark Operator
2.4.0
2.4.0-1.0.1
Upstream chart
spark-operator 2.4.0

Spark Operator 2.4.0 - Kubernetes operator for managing Apache Spark applications

quay.io/okdp/platform-packages/spark-operator:2.4.0-1.0.1

Included references

  • spark-operator:2.4.0 (https://kubeflow.github.io/spark-operator)
Spark RBAC
1.0.1
1.0.1-1.0.1
OKDP chart
spark-rbac 1.0.1

Namespace roles and bindings letting Spark applications run in a project.

quay.io/okdp/platform-packages/spark-rbac:1.0.1-1.0.1

Included references

  • quay.io/okdp/charts/spark-rbac:1.0.1
Trino
480
480.0.0-1.0.1
Upstream chart
trino v1.42.1

Distributed SQL query engine designed for large-scale data processing across multiple data sources.

quay.io/okdp/platform-packages/trino:480.0.0-1.0.1

Included references

  • opa-kube-mgmt:11.0.7 (https://open-policy-agent.github.io/kube-mgmt/charts)
  • quay.io/okdp/charts/opal-secrets:0.1.1
  • opal:0.0.30 (https://permitio.github.io/opal-helm-chart)
  • quay.io/adaltas/oidc-dcr:0.3.2
  • trino:v1.42.1 (https://trinodb.github.io/charts/)
  • docker.io/openpolicyagent/opa:1.16.1
  • docker.io/permitio/opal-client-standalone:0.9.4
  • docker.io/permitio/opal-server:0.9.4
  • docker.io/trinodb/trino:480

Control plane2

OKDP's own automation layer: the API server and the web console.

OKDP Control Plane Console
0.9.1
0.9.1-1.1.0
OKDP chart
okdp-control-plane-ui 0.9.1

Frontend web interface for the Open Kubernetes Data Platform

quay.io/okdp/platform-packages/okdp-control-plane-ui:0.9.1-1.1.0

Included references

  • quay.io/okdp/charts/okdp-control-plane-ui:0.9.1
OKDP Control Plane Server
0.9.0
0.9.0-1.1.0
OKDP chart
okdp-control-plane-server 0.9.0

API backend for the Open Kubernetes Data Platform

quay.io/okdp/platform-packages/okdp-control-plane-server:0.9.0-1.1.0

Included references

  • quay.io/okdp/charts/okdp-control-plane-server:0.9.0

Sandbox dependencies14

Cluster services OKDP relies on: identity, storage, certificates and ingress.

cert-manager
1.17.1
1.17.1-1.0.1
Upstream chart
cert-manager v1.17.1
quay.io/okdp/sandbox-dependencies/cert-manager:1.17.1-1.0.1

Included references

  • cert-manager:v1.17.1 (https://charts.jetstack.io)
  • trust-manager:v0.16.0 (https://charts.jetstack.io)
  • quay.io/okdp/charts/cert-issuers:0.2.0
CloudNativePG
1.29.1
1.29.1-1.0.1
Upstream chart
cloudnative-pg 0.28.0

CloudNativePG is the Kubernetes operator that covers the full lifecycle of a highly available PostgreSQL database cluster

quay.io/okdp/sandbox-dependencies/cloudnative-pg:1.29.1-1.0.1

Included references

  • cloudnative-pg:0.28.0 (https://cloudnative-pg.github.io/charts/)
  • ghcr.io/cloudnative-pg/cloudnative-pg:1.29.1
CoreDNS patch
1.0.0
1.0.0-1.0.1
OKDP chartOKDP image
coredns-patch 0.1.0

Rewrites cluster DNS so platform hostnames resolve inside the sandbox.

quay.io/okdp/sandbox-dependencies/coredns-patch:1.0.0-1.0.1

Included references

  • quay.io/okdp/charts/coredns-patch:0.1.0
  • quay.io/okdp/sandbox-images/kubectl:latest
DNS server
1.0.0
1.0.0-1.0.1
OKDP chart
dns-server 1.0.0

dnsmasq resolver serving the sandbox ingress suffix.

quay.io/okdp/sandbox-dependencies/dns-server:1.0.0-1.0.1

Included references

  • quay.io/okdp/charts/dns-server:1.0.0
  • docker.io/4km3/dnsmasq:2.90-r3
External Secrets Operator
0.15.1
0.15.1-1.0.1
Upstream chart
external-secrets 0.15.1

External Secrets Operator synchronizes secrets from external APIs (HashiCorp Vault, AWS Secrets

quay.io/okdp/sandbox-dependencies/external-secrets:0.15.1-1.0.1

Included references

  • external-secrets:0.15.1 (https://charts.external-secrets.io)
HashiCorp Vault
0.29.1
0.29.1-1.0.1
Upstream chart
vault 0.29.1

HashiCorp Vault, the secret backend a SecretStore points at. Runs in dev mode by default,

quay.io/okdp/sandbox-dependencies/vault:0.29.1-1.0.1

Included references

  • vault:0.29.1 (https://helm.releases.hashicorp.com)
Ingress NGINX
4.12.1
4.12.1-1.0.1
Upstream chart
ingress-nginx 4.12.1
The Kubernetes project retired Ingress NGINX in March 2026; it receives no further releases, bugfixes or security updates. OKDP 1.0 ships it deliberately and existing deployments keep working. The migration path, whether Gateway API or another controller, will be decided after 1.0.

NGINX Ingress Controller for Kubernetes with support for multiple deployment modes

quay.io/okdp/sandbox-dependencies/ingress-nginx:4.12.1-1.0.1

Included references

  • ingress-nginx:4.12.1 (https://kubernetes.github.io/ingress-nginx)
Keycloak
26.1.3
24.4.11-1.0.1
Upstream chartOKDP image
keycloak 24.4.11

Keycloak identity and access management for Kubernetes

quay.io/okdp/sandbox-dependencies/keycloak:24.4.11-1.0.1

Included references

  • registry-1.docker.io/bitnamicharts/keycloak:24.4.11
  • quay.io/okdp/sandbox-images/keycloak:26.1.3-debian-12-r0
  • quay.io/okdp/sandbox-images/keycloak-config-cli:6.4.0-debian-12-r0
kubauth
0.3.0-snapshot
0.3.0-snapshot-1.0.1
Upstream chart
kubauth 0.3.0-snapshot

OIDC authentication for kubectl against the platform identity provider.

quay.io/okdp/sandbox-dependencies/kubauth:0.3.0-snapshot-1.0.1

Included references

  • quay.io/kubauth/charts/kubauth:0.3.0-snapshot
KuboCD webhooks
v0.3.2
v0.3.2-1.0.1
Upstream chart
kubocd-wh v0.3.2

Admission webhooks backing the KuboCD Release and Context resources.

quay.io/okdp/sandbox-dependencies/kubocd-webhooks:v0.3.2-1.0.1

Included references

  • quay.io/kubocd/charts/kubocd-wh:v0.3.2
Local secrets provider
1.0.0
1.0.0-1.0.1
OKDP chart
local-secrets-provider 0.1.0

Generates sandbox credentials in-cluster, standing in for a real vault.

quay.io/okdp/sandbox-dependencies/local-secrets-provider:1.0.0-1.0.1

Included references

  • quay.io/okdp/charts/local-secrets-provider:0.1.0
Platform tools
1.0.0
1.0.0-1.0.1
Upstream chart
reloader 1.0.72

Reloader, kubernetes-replicator and secret-generator, bundled as one package.

quay.io/okdp/sandbox-dependencies/tools:1.0.0-1.0.1

Included references

  • reloader:1.0.72 (https://stakater.github.io/stakater-charts)
  • kubernetes-replicator:2.9.2 (https://helm.mittwald.de)
  • kubernetes-secret-generator:3.4.0 (https://helm.mittwald.de)
PostgreSQL
18.3.0
18.3.0-1.0.1
OKDP chart
cnpg-postgresql 0.1.0

PostgreSQL clusters provisioned through CloudNativePG.

quay.io/okdp/sandbox-dependencies/cnpg-postgresql:18.3.0-1.0.1

Included references

  • quay.io/okdp/charts/cnpg-postgresql:0.1.0
  • ghcr.io/cloudnative-pg/postgresql:18.3
SeaweedFS
4.17.0
4.17.0-1.0.2
Upstream chart
seaweedfs 4.17.0

S3-compatible object store backing the lakehouse in the sandbox.

quay.io/okdp/sandbox-dependencies/seaweedfs:4.17.0-1.0.2

Included references

  • quay.io/okdp/charts/seaweedfs-auth-config:1.1.0
  • seaweedfs:4.17.0 (https://seaweedfs.github.io/seaweedfs/helm)
  • quay.io/okdp/charts/seaweedfs-provisioning:1.1.0

Built from platform-packages@e8cb47d (October 5, 2026), sandbox-dependencies@5561a98 (October 2, 2026).