Container runtimes
The image is a standard OCI artifact and runs on any OCI-compliant runtime.
Orchestration platforms
Java runtime
The image bundles its own JRE (Eclipse Temurin 17). No host JRE is required. Running the application as a bare JAR outside the image is not a supported production configuration.Database engines
Identity providers
Ingress controllers
Any standards-compliant ingress controller that can terminate TLS and forward HTTP to aClusterIP Service (NGINX Ingress, Traefik, HAProxy, OpenShift Router, cloud load balancers). No controller-specific features are required.
Browsers
Out of scope
The following are explicitly not supported for production:ALETYX_OIDC_PROVIDER=none(bypasses authentication — diagnostics only).HIBERNATE_DDL_AUTO=createagainst a production database (destroys data on restart).- Sharing one database across multiple Decision Control instances.
- Running the container as root or with elevated capabilities.
- Databases other than PostgreSQL.
- Running the application outside its published container image.