43 widely used Kubernetes tools for the Nutanix Kubernetes Platform (NKP), one click away in the NKP UI. Every entry is the upstream Helm chart with upstream defaults; the catalog only adds the NKP metadata, the ingress and dashboard card for web UIs, and the few values a chart cannot start without. Everything is tested on NKP 2.19 and on kind before it is published.
Not an official Nutanix product, not supported by Nutanix or the upstream projects. Labs and demos only. For Nutanix products use the Nutanix Product Catalog and the Partner Catalog.
NKP 2.19, Ultimate licence, management cluster able to reach ghcr.io.
nkp create catalog-collection \
--url oci://ghcr.io/fen0l/nutanix-nkp-lab-catalog/collection \
--tag 2.19 \
--workspace kommander-workspaceThen Workspace → Applications in the NKP UI, filter by category (gitops, security,
observability, ...). Pick one, Enable, Deploy. Apps with a web UI get a card with an open button
on the cluster page. Each application page shows the exact values the catalog sets, how to reach
the tool and what to know on NKP 2.19.
The CLI equivalent:
kubectl get apps -n kommander
nkp create appdeployment podinfo --app podinfo-6.15.0 --workspace <workspace>Some UIs cannot run under a sub-path (OpenBao, Argo Rollouts, Gitea, Backstage, Policy Reporter,
Falco, Litmus, Portainer): enabling them asks for the cluster's ingress domain and serves them as
<app>.<domain>. Point a wildcard DNS record *.<domain> at the NKP Traefik address, or use
<traefik-ip>.nip.io.
Grouped by the category shown in the NKP UI. Chart = Helm chart version, App = application version. Instances: one per cluster entries are enabled from a workspace; per project / workspace entries can be deployed several times, each in its own namespace. Web UI is served by the NKP Traefik on the cluster ingress.
| Application | Chart | App | Instances | Web UI | Requires | |
|---|---|---|---|---|---|---|
 |
Argo CD | 10.10.3 | v3.5.5 | one per cluster | /argo-cd/ |
|
 |
Argo Workflows | 2.0.12 | v4.1.5 | one per cluster | /argo-workflows/ |
|
 |
Argo Events | 2.4.27 | v1.9.11 | one per cluster | ||
 |
Argo Rollouts | 2.43.6 | v1.10.0 | one per cluster | rollouts.<domain> |
|
 |
Flagger | 1.45.0 | 1.45.0 | one per cluster | ||
 |
Sealed Secrets | 2.20.0 | 0.40.0 | one per cluster |
| Application | Chart | App | Instances | Web UI | Requires | |
|---|---|---|---|---|---|---|
 |
Gitea | 12.7.0 | 1.27.0 | per project / workspace | gitea.<domain> |
|
 |
Jenkins | 5.9.68 | 2.580.1 | one per cluster | /jenkins/ |
|
 |
Backstage | 2.10.2 | demo image | per project / workspace | backstage.<domain> |
|
 |
Podinfo | 6.15.0 | 6.15.0 | per project / workspace | /<instance>/ |
|
 |
Portainer CE | 245.2.0 | 2.45.2 | one per cluster | portainer.<domain> |
|
 |
vCluster | 0.37.3 | 0.37.3 | per project / workspace |
| Application | Chart | App | Instances | Web UI | Requires | |
|---|---|---|---|---|---|---|
 |
k6 Operator | 4.6.0 | 1.6.0 | one per cluster | ||
 |
LitmusChaos | 3.30.0 | 3.30.0 | one per cluster | litmus.<domain> |
| Application | Chart | App | Instances | Web UI | Requires | |
|---|---|---|---|---|---|---|
 |
Falco | 9.2.0 | 0.45.0 | one per cluster | falco.<domain> |
|
 |
Tetragon | 1.7.1 | 1.7.1 | one per cluster | ||
 |
Trivy Operator | 0.32.1 | 0.30.1 | one per cluster | ||
 |
Kubescape Operator | 1.40.5 | 1.40.5 | one per cluster | ||
 |
Kyverno | 3.9.1 | v1.19.1 | one per cluster | ||
 |
Kyverno Policies (Pod Security) | 3.9.1 | v1.19.1 | one per cluster | kyverno | |
 |
Policy Reporter | 3.11.0 | 3.11.0 | one per cluster | policy-reporter.<domain> |
kyverno, trivy-operator |
 |
OpenBao | 0.30.3 | v2.7.1 | one per cluster | openbao.<domain> |
|
 |
Keycloak | 7.3.2 | 26.7.4 | one per cluster | /keycloak/ |
|
 |
trust-manager | 0.25.0 | v0.25.0 | one per cluster | cert-manager | |
 |
cert-manager approver-policy | 0.28.0 | v0.28.0 | one per cluster | cert-manager | |
 |
Capsule | 0.14.6 | 0.14.6 | one per cluster | cert-manager |
| Application | Chart | App | Instances | Web UI | Requires | |
|---|---|---|---|---|---|---|
 |
OpenTelemetry Collector | 0.175.1 | 0.161.0 | per project / workspace | ||
 |
Grafana Tempo | 1.24.4 | 2.9.0 | per project / workspace | ||
 |
VictoriaLogs | 0.13.10 | v1.53.0 | one per cluster | /victoria-logs/select/vmui/ |
| Application | Chart | App | Instances | Web UI | Requires | |
|---|---|---|---|---|---|---|
 |
NGINX Ingress Controller | 4.15.1 | 1.15.1 | one per cluster |
| Application | Chart | App | Instances | Web UI | Requires | |
|---|---|---|---|---|---|---|
 |
Envoy Gateway | 1.9.2 | v1.9.2 | one per cluster | ||
 |
NGINX Gateway Fabric | 2.7.2 | 2.7.2 | one per cluster | gateway-api-crds |
| Application | Chart | App | Instances | Web UI | Requires | |
|---|---|---|---|---|---|---|
 |
KEDA | 2.21.0 | 2.21.0 | one per cluster | ||
 |
KEDA HTTP Add-on | 0.16.0 | 0.16.0 | one per cluster | keda | |
 |
Descheduler | 0.37.0 | 0.37.0 | one per cluster | ||
 |
Kured (Reboot Daemon) | 6.1.0 | 1.23.0 | one per cluster | ||
 |
Reflector | 10.0.65 | 10.0.65 | one per cluster | ||
 |
Crossplane | 2.4.2 | 2.4.2 | one per cluster | ||
 |
Dapr | 1.18.7 | 1.18.7 | one per cluster |
| Application | Chart | App | Instances | Web UI | Requires | |
|---|---|---|---|---|---|---|
 |
Strimzi (Apache Kafka) | 1.3.0 | 1.3.0 | one per cluster | ||
 |
Kafka UI (Kafbat) | 1.6.5 | v1.5.0 | one per cluster | /kafka-ui/ |
|
 |
MongoDB Community Operator | 0.13.0 | 0.13.0 | one per cluster | ||
 |
Redis Operator (OT) | 0.27.0 | 0.27.0 | one per cluster |
Versions versus upstream, refreshed daily: docs/VERSIONS.md.
Already in NKP, therefore not duplicated here: cert-manager, kube-prometheus-stack, Grafana, Loki, Fluent Bit, Velero, Harbor, Istio, Kiali, Jaeger, Gatekeeper, External Secrets, External DNS, CloudNativePG, Traefik, Rook Ceph, Knative, NVIDIA GPU Operator, Kubernetes Dashboard, Gateway API CRDs (platform applications), plus NDK, NAI, KServe, OpenTelemetry Operator, Envoy Gateway NAI, Kueue and the AI stack (Nutanix product and AI catalogs). Hubble relay already runs on NKP Cilium clusters; Hubble UI is a value toggle on the existing Cilium release, not a separate chart.
nkp create catalog-collectionregisters the OCI collection; Kommander creates oneAppperapplications/<app>/<version>/and the UI lists them.- Enabling an app creates an
AppDeployment; Kommander applies the entry's FluxKustomizationto the target cluster, which pulls the chart and reconciles theHelmRelease. - Overrides are a ConfigMap
<app>-config-overrides(keyvalues.yaml) referenced by the AppDeployment; the catalog's own values are the ConfigMap<app>-config-defaults. - New chart version = new
<version>/directory, never an in-place edit; a daily workflow opens one pull request per outdated application.
Apache-2.0 for the catalog manifests and tooling. Each packaged application keeps its own upstream licence.