Dash Enterprise for Kubernetes

Minimum System Requirements

Core Prerequisites

• Kubernetes 1.30+
• Customer-provided Kubernetes cluster (can be dedicated/single-tenant or shared/multi-tenant)
• Minimum 2x nodes with 8vCPU and 32GB each
• Helm (for installation and upgrades), kubectl
• DNS
• A fully qualified domain name (FQDN)
• A wildcard or multi-domain TLS/SSL full certificate chain and unencrypted, 2048-bit private key (.pem of the full chain)

Resource Requirements

• No fixed sizing rules (depends on customer’s cluster capacity)
• Namespace-scoped deployment (runs within a single Kubernetes namespace)

Kubernetes Distribution Compatibility

Officially supported with Kubernetes 1.30+: * AWS EKS * Azure AKS * Google GKE Standard

Kubernetes Setup Options

Cluster types: * Shared multi-tenant clusters (run Dash Enterprise for Kubernetes alongside other applications) * Dedicated clusters * Multiple Dash Enterprise for Kubernetes instances (multiple instances in different namespaces of the same cluster)

Installation: * Helm-based installation packaged via Replicated

Network options: * Uses customer’s existing container network interface (CNI) * Customers can use their own ingress controller and load balancer * Supports airgapped environments * Works with private networks and internet-connected environments

Optional Integrations

Authentication & IAM * Kubernetes services accounts to do IAM role integration (Dash apps can attach Kubernetes service accounts for workload identity)

Secrets management * Connect to a secrets manager via Kubernetes service account

Git integration: * Store code in your GitHub organization via GitHub App (rather than on-cluster Gitea)

Security features: * Namespace isolation with resource quotas and network policies * Non-root Dash apps and workspaces by default (configurable) * Network policies for tenant isolation

Certificate management * Globally signed certificates * Internal CA * Self-signed certificates

Backup storage * Off-cluster backups supported * Automated backup scheduling via cron jobs * Restore to new infrastructure supported

Storage Options

Persistent storage

• Use Kubernetes PVs
• Customer-defined storage classes

Container registry * External registry integration for Dash app images (rather than on-cluster Distribution registry) (optional)
* Artifactory
* Azure Container Registry (ACR)
* Docker Hub
* Google Artifact Registry
* Quay
* Sonatype Nexus