Azure reference architectureApache Superset on Azure
Deploy a fully-managed Apache Superset instance in your Azure subscription on AKS, backed by Azure DB for PostgreSQL and Azure Cache for Redis. D23 maps Entra ID groups to Superset roles, connects Synapse Analytics and Fabric, and manages zero-downtime upgrades.
AzureRuntime: Azure AKS + Azure DB for PostgreSQL + Azure CacheEntry point
One-click deploy from the D23 console or Terraform module
Cloud / Azure
D23 platform
Apache Superset
dashboards · datasets · SQL Lab
D23 Managed Layer
SSO · row-level security · upgrades
Compute & cache
Kubernetes cluster
Azure AKS + Azure DB for PostgreSQL + Azure Cache
Data Modelling AI
managed by D23
Synapse / Fabric Connector
managed by D23
Entra ID Role Mapper
managed by D23
Async Query Worker
managed by D23
Data sources
50+ supported databases
Your infrastructure
Azure AKS
Azure DB for PostgreSQL (metadata)
Azure Cache for Redis
Azure Synapse Analytics / Fabric
How the deployment works
Starting point: One-click deploy from the D23 console or Terraform module
- 1
D23 provisions an AKS cluster in your Azure subscription and deploys Apache Superset via Helm
- 2
Azure Database for PostgreSQL Flexible Server is provisioned as the Superset metadata store; Azure Cache for Redis backs Celery workers
- 3
Managed Identity and Private Endpoints are configured so Superset queries Azure Synapse Analytics and Fabric without public internet exposure
- 4
D23 AI models your Synapse / Fabric datasets, generates Superset datasets with correct grain and metrics, and wires up SSO via Entra ID
- 5
Ongoing: D23 handles zero-downtime Superset upgrades, row-level security rules per Entra group, and async query concurrency scaling
D23 managed services
- Data Modelling AI
- Synapse / Fabric Connector
- Entra ID Role Mapper
- Async Query Worker
Connected data sources
50+ databases supported — Snowflake, BigQuery, Redshift, Postgres, ClickHouse, and more.
Infrastructure & data
Azure AKS + Azure DB for PostgreSQL + Azure Cache
Azure AKS
Azure DB for PostgreSQL (metadata)
Azure Cache for Redis
Azure Synapse Analytics / Fabric
Security & operational considerations
- Managed Identity removes all static credentials from the deployment
- Private Endpoints keep Synapse and PostgreSQL traffic off the public internet
- Azure Monitor and Diagnostic Logs capture query-level telemetry
- Entra ID groups map directly to Superset roles and row-level security filters
Azure deployment
Deployed in your Azure subscription on AKS, with Managed Identity, Private Endpoints to Synapse / Fabric, and Azure Monitor. D23 wires Entra ID to Superset roles and row-level security.
Turn every team into a data team.
Get managed Apache Superset, the dashboards your business needs, and AI on top, without hiring a data team.