Documentation Index
Fetch the complete documentation index at: https://docs.nx1cloud.com/llms.txt
Use this file to discover all available pages before exploring further.
nx1-deployer image
v1.13.0Features
New features recently added to the NexusOne platform.Observability
Each deployed NexusOne tenant now has 19 pre-built Grafana dashboards covering every NexusOne platform component. It also includes automated alerts that fire when components degrade or fail. Dashboards are available for the following NexusOne components:- AI API
- Airflow
- Apache Ranger
- Apache Spark
- DataHub
- Grafana
- Gravitino
- JupyterHub
- Keycloak
- Kyuubi
- Loki
- Metastore
- Mimir
- Namespace Overview
- PostgreSQL
- Superset
- Tempo
- Trino
- YuniKorn
| Service | Alert | Condition |
|---|---|---|
| Airflow | DAG failures detected | Any DAG in failed state |
| Airflow | Task failures detected | Any task in failed state |
| Trino | Query failure rate high | > 0.1 failures/min |
| Trino | Memory pool >85% utilized | Cluster memory > 85% |
| JupyterHub | Server spawn duration high | p95 spawn time > 300 s |
| Ranger | Java virtual machine (JVM) memory >85% utilized | JVM heap > 85% |
| Kyuubi | Heap >85% | Heap usage > 85% |
| Spark | Executor/driver pods failed | Any Spark pod in failed phase |
| AI API | 5xx error rate elevated | > 1 error/s |
| AI API | Crew execution errors | Any crew execution error |
| Keycloak | Failed login rate elevated | > 1 failed login/s |
| DataHub | General Metadata Service (GMS) 5xx error rate elevated | > 1 error/s |
| YuniKorn | Pending applications backlog | > 10 apps pending scheduling |
| PostgreSQL | Connection saturation >90% | Connections > 90% of max |
S3 gateway
NexusOne now includes an S3 gateway that allows you to programmatically access object storage through any S3-compatible tool using your existing NexusOne credentials instead of managing raw S3 keys. Keycloak authenticates every request, and Ranger authorizes them. This gives platform admins full control over who can access what.Bug fixes
Fixes to issues affecting apps or features on the NexusOne platform.OpenShift
Previously, platform components deployed on OpenShift clusters weren’t reachable at their expected URLs. NexusOne created routes without a host field, meaning components weren’t reachable at their expected URLs. NexusOne now assigns every component, such as JupyterHub, Trino, or Superset, a route with the correct hostname.Security patches
This release patches several CVEs across a few container images running in NexusOne.| App | CVE | Resolution |
|---|---|---|
| gravitino-rest | CVE-2026-4878 | Switched base image from eclipse-temurin:17-jre-jammy to eclipse-temurin:17-jre-noble |
| keycloak | CVE-2026-4878 | Updated to the fixed version of libcap and cleaned package manager caches |
| nginx-unprivileged | CVE-2026-4367 | Upgraded libxpm to the latest version |
oauth2-proxy | CVE-2026-34986 | Upgraded oauth2-proxy image from v7.15.1 to v7.15.2 |
| Superset | CVE-2024-12797 | Upgraded cryptography version |
| Superset | CVE-2024-39689 | Upgraded certifi package |
| Superset | CVE-2024-52338 | Upgraded pyarrow |
| Superset | CVE-2026-4878 | Upgraded libcap2 |
| Trino | PRISMA-2023-0067 | Upgraded com.fasterxml.jackson.core from v2.14.2 to v2.18.2 |
Enhancements
Enhancements to existing app features on the NexusOne platform.Apache Ranger
The Ranger platform component is now a shared service across all tenants. Previously each NexusOne tenant ran its own Ranger instance, now it’s deployed once and shared across all tenants. Audit logs, the record of who accessed what data and when, were previously stored in Elasticsearch. They’re now stored in OpenSearch, which is NexusOne’s standard search backend.Ollama
The Ollama platform component is now a shared service across all deployed NexusOne tenants. Previously, each tenant ran its own Ollama instance, now it’s deployed once and shared across all tenants. This reduces resource overhead without any changes to the API or how you interact with it.Apache Spark
Spark jobs can now read from nested S3 directory structures automatically, without needing to explicitly list each subdirectory. This is particularly useful for partitioned datasets stored in S3.Upgrades
Version upgrades to existing apps on the NexusOne platform.Apache Ranger v2.8.0 upgrade
Apache Ranger now runs v2.8.0, upgraded from v2.6.2.
Apache Spark and JupyterHub
Apache Iceberg now runsv1.10.1. If you are running Spark jobs from JupyterHub, you get the latest Iceberg features
and bug fixes for table format operations.
Superset v6.1.0 upgrade
Superset now runs v6.1.0, upgraded from v4.1.2. This version includes new UI features, performance enhancements,
and bug fixes for dashboards and data exploration.