Dynamic Engine v1.0.0 release
Dynamic Engine
v1.0.0 introduces major improvements for better performance and stability. This release
includes full support for air-gapped environments, GKE (Google Kubernetes Engine) as a
runtime, and custom truststores and keystores for Data Services and Routes.
Release information
- Release Name: Dynamic Engine 1.0.0 (2025-10)
- Release Date: October 23, 2025
- Compatibility: Kubernetes v1.30 and above
Notable new features
- DPE-1393: Full support for deployments based on an air gap (an air gap is a security measure that isolates a system from unsecured networks).
- DPE-1149: Full support for GKE, excluding its Autopilot mode.
- DPE-1723: Support for custom truststores and keystores for Data Services and Routes.
- DPE-1969: Improved startup time for config-manager and data-service-route-deployer services.
Key improvements and security enhancements
- CVE-2025-6020: Fixed base images for services to address the Linux-PAM directory traversal vulnerability.
- DPE-1732: Log processing no longer requires a distributed file system, reducing infrastructure costs.
Included services
| Helm chart name | Chart version | Scope | Artifact path |
|---|---|---|---|
| dynamic-engine-crd | 1.0.0 | Custom resource definitions | ghcr.io/talend/helm/dynamic-engine-crd |
| dynamic-engine | 1.0.0 | Dynamic Engine infrastructure | ghcr.io/talend/helm/dynamic-engine |
| dynamic-engine-environment | 1.0.0 | Dynamic Engine environment | ghcr.io/talend/helm/dynamic-engine-environment |
| Service | Chart version | Artifact path |
|---|---|---|
| reloader | 2.2.3 | ghcr.io/talend/helm/reloader |
| docker-registry | 3.0.0 | ghcr.io/talend/helm/docker-registry |
| engine-config-manager | 2.3.0 | ghcr.io/talend/helm/dpe-engine-config-manager |
| di-job-deployer | 1.20.1 | ghcr.io/talend/helm/dpe-di-job-deployer |
| di-job-controller | 1.11.0 | ghcr.io/talend/helm/dpe-job-controller |
| log-collector | 1.3.0 | ghcr.io/talend/helm/dpe-log-collector |
| data-service-route-deployer | 1.0.0 | ghcr.io/talend/helm/dpe-data-service-route-deployer |
| Service | Image version | Function scope | Artifact path |
|---|---|---|---|
| engine-operator | 1.0.0 | Infrastructure | ghcr.io/talend/engine-operator |
| reloader | v1.4.8 | Infrastructure | ghcr.io/talend/reloader |
| docker-registry | 3.0.0 | Infrastructure | ghcr.io/talend/registry |
| engine-config-manager | 1.7.0 | Pairing | ghcr.io/talend/engine-config-manager |
| di-job-deployer | 2.21.0 | Data integration | ghcr.io/talend/di-job-deployer |
| di-job-controller | 2.19.0 | Data integration | ghcr.io/talend/job-controller |
| di-job-restore-orphans | 1.16.0 | Data integration | ghcr.io/talend/di-job-restore-orphans |
| log-collector | 1.6.0 | Common | ghcr.io/talend/dynamic-engine-log-collector |
| fluent-bit | 4.0.10 | Common | ghcr.io/talend/fluent-bit |
| data-service-route-deployer | 1.8.0 | Data Services and Routes | ghcr.io/talend/data-service-route-deployer |
| image-builder | 1.6.0 | Data Services and Routes | ghcr.io/talend/image-builder |
Artifact signature checks
Qlik provides digital signatures for all official images and Helm charts from Dynamic Engine v0.22 onwards. All artifacts are signed at build time with an asymmetric key pair: the private key is used for signing, and the public key is made available for signature verification.
For further information about this optional authenticity check of Dynamic Engine artifacts, see Security option: Verifying Dynamic Engine artifact signatures.