OSDU Community Implementation on Azure
One Command · Open Platform · Operationally Secure
CIMPL Azure provisions AKS Automatic, bootstraps the platform foundation, and deploys the full OSDU service stack. All open-source Terraform, one command, no manual wiring.
-
Simple
Single command deploys the full stack. Isolated developer environments. No manual platform wiring.
-
Secure
Hardened by default. Managed Istio, workload identity, policy enforcement with native monitoring.
-
Smart
A multi-agent system with daily briefings, automated workflows, and persistent knowledge. The smart way to work across the OSDU ecosystem.
How does it work?
%%{init: {'theme': 'base', 'themeVariables': {'primaryColor': '#1a5276', 'primaryTextColor': '#fff', 'primaryBorderColor': '#154360', 'lineColor': '#1a5276', 'secondaryColor': '#1f6f8b', 'tertiaryColor': '#1f6f8b'}}}%%
graph LR
A[Run\nazd up] --> B[Provision\nAKS Automatic] --> C[Bootstrap\nFoundation] --> D[Deploy\nOSDU Stacks] -
Provision
Azure Developer CLI creates the resource group, kubernetes cluster, monitoring, and workload identities.
-
Bootstrap
Foundation layer installs cluster-wide operators for certificates, databases, search, DNS, and ingress.
-
Deploy
Software stacks deploy middleware and all OSDU services with automatic compliance patching.
Why OSDU on Azure?
-
Transparent
Open-source Terraform with every design decision documented. No hidden scripts, no black-box modules.
-
Automated
One command deploys infrastructure, platform operators, and 20+ microservices with policy compliance at every layer.
-
Configurable
Feature flags control every component. Toggle any service with a single variable. No fork required.
-
Compliant
Built for AKS Automatic with deployment safeguards, managed Istio, pod security standards, and Azure RBAC.
Who is it for?
-
Platform Operators
Stand up a running OSDU instance on Azure. One command to deploy, one command to tear down.
-
Service Developers
Your own OSDU environment to code against, deploy to, and test with. Full agentic system with agents, skills, and knowledge vault included.
What can it do?
| Capability | Description |
|---|---|
| Multi-instance isolation | Deploy multiple OSDU instances on the same cluster with automatic namespace separation |
| Per-service databases | Dedicated database per service on a shared HA cluster with synchronous replication |
| Dynamic scaling | Airflow tasks and stateful nodes provision on demand and clean up automatically |
| Pre-deployment validation | Server dry-run verifies every resource against cluster policies before deployment begins |
| Upstream-safe customization | Automatic Kustomize patching keeps Helm charts compliant without forking upstream |
| Identity provider | Keycloak with automated OSDU realm initialization at deploy time |