SDR Orchestrator image and versioning
Identify the container images used for the SDR Orchestrator, understand their versioning, and find the exact version assigned to your tenant.
This page identifies the container images used to run the Self-Deployed Runtime (SDR) Orchestrator. Use it as vendor, product, and version evidence when registering the software with a governance or procurement process.
SDR Orchestrator
The SDR Orchestrator is distributed as a container image. Docker/Podman and Kubernetes use separate platform-specific images:
| Platform | Image repository | Image version | Image reference |
|---|---|---|---|
| Docker/Podman | atlanhq/atlan-sdr-orchestrator | main-dc31d17abcd | atlanhq/atlan-sdr-orchestrator:main-dc31d17abcd |
| Kubernetes | atlanhq/atlan-sdr-orchestrator-k8s | main-3c1883c | atlanhq/atlan-sdr-orchestrator-k8s:main-3c1883c |
| Field | Value |
|---|---|
| Vendor | Atlan |
| Product name | SDR Orchestrator |
The image repositories are in Docker Hub's private atlanhq/* namespace. Pulling an image requires the Docker Hub Personal Access Token (PAT) that your Atlan representative provides. The PAT is rotated periodically.
The Docker/Podman reference is from the SDR package published on August 27, 2026. The Kubernetes reference is a verified marketplace example documented on July 13, 2026. These are point-in-time references, not release assignments for every tenant.
How SDR Orchestrator versioning works
The image tag is the version identifier for an SDR Orchestrator image. Docker/Podman and Kubernetes use separate images and build pipelines, so their tags can differ. Treat each platform's image reference as independent.
A downloaded SDR package contains an image reference that's pre-filled for the target platform. The references in the table are examples and might not be assigned to your tenant.
In orchestrator mode, Atlan manages the lifecycle of the SDR Orchestrator and connector apps independently. The Orchestrator continuously reconciles to the version Atlan publishes for your tenant. Don't replace the tag in an SDR package with an example from this page.
For installation steps, see Install SDR Orchestrator on Docker/Podman or Install SDR Orchestrator on Kubernetes.
Find exact version assigned to your tenant
Use the latest-releases endpoint to determine the source image reference that Atlan has assigned to your tenant. It returns the image and version for SDR-capable apps, including the SDR Orchestrator.
This requires a valid Atlan API token:
curl -sS \
-H "Authorization: Bearer $ATLAN_API_TOKEN" \
"https://<your-tenant>.atlan.com/api/service/marketplace/latest-releases"
Find the release whose app_name identifies the SDR Orchestrator. The image value is a repo:tag reference and is the exact source image assigned to your tenant at that time.
There is no single version that's correct for every tenant. Different tenants can be assigned different active release cohorts. The endpoint response, not the examples on this page, is the source of truth for your deployment.
Verify image
Atlan signs every SDR image with keyless Cosign. Before you deploy or mirror an image, verify its signature using the image reference returned for your tenant. See Verify container images.
For private-registry guidance, see Image procurement approach and Keep private registry in sync.