provisioning/docs/src/operations/platform.md

1 line
9.2 KiB
Markdown
Raw Normal View History

# Platform Services\n\nThe Provisioning Platform consists of microservices that work together to provide infrastructure automation capabilities.\n\n## Overview\n\nAll platform services are built with Rust for performance, safety, and reliability. They expose REST APIs and integrate seamlessly with the\nNushell-based CLI.\n\n## Core Services\n\n### [Orchestrator](orchestrator.md)\n\n**Purpose**: Workflow coordination and task management\n\n**Key Features**:\n\n- Hybrid Rust/Nushell architecture\n- Multi-storage backends (Filesystem, SurrealDB)\n- REST API for workflow submission\n- Test environment service for automated testing\n\n**Port**: 8080 \n**Status**: Production-ready\n\n---\n\n### [Control Center](control-center.md)\n\n**Purpose**: Policy engine and security management\n\n**Key Features**:\n\n- Cedar policy evaluation\n- JWT authentication\n- MFA support\n- Compliance framework (SOC2, HIPAA)\n- Anomaly detection\n\n**Port**: 9090 \n**Status**: Production-ready\n\n---\n\n### [KMS Service](kms-service.md)\n\n**Purpose**: Key management and encryption\n\n**Key Features**:\n\n- Multiple backends (Age, RustyVault, Cosmian, AWS KMS, Vault)\n- REST API for encryption operations\n- Nushell CLI integration\n- Context-based encryption\n\n**Port**: 8082 \n**Status**: Production-ready\n\n---\n\n### [API Server](provisioning-server.md)\n\n**Purpose**: REST API for remote provisioning operations\n\n**Key Features**:\n\n- Comprehensive REST API\n- JWT authentication\n- RBAC system (Admin, Operator, Developer, Viewer)\n- Async operations with status tracking\n- Audit logging\n\n**Port**: 8083 \n**Status**: Production-ready\n\n---\n\n### [Extension Registry](extension-registry.md)\n\n**Purpose**: Extension discovery and download\n\n**Key Features**:\n\n- Multi-backend support (Gitea, OCI)\n- Smart caching (LRU with TTL)\n- Prometheus metrics\n- Search functionality\n\n**Port**: 8084 \n**Status**: Production-ready\n\n---\n\n### [OCI Registry](oci-registry.md)\n\n**Purpose**: Artifact storage and distribution\n\n**Supported Registries**:\n\n- Zot (recommended for development)\n- Harbor (recommended for production)\n- Distribution (OCI reference)\n\n**Key Features**:\n\n- Namespace organization\n- Access control\n- Garbage collection\n- High availability\n\n**Port**: 5000 \n**Status**: Production-ready\n\n---\n\n### [Platform Installer](installer.md)\n\n**Purpose**: Interactive platform deployment\n\n**Key Features**:\n\n- Interactive Ratatui TUI\n- Headless mode for automation\n- Multiple deployment modes (Solo, Multi-User, CI/CD, Enterprise)\n- Platform-agnostic (Docker, Podman, Kubernetes, OrbStack)\n\n**Status**: Complete (1,480 lines, 7 screens)\n\n---\n\n### [MCP Server](mcp-server.md)\n\n**Purpose**: Model Context Protocol for AI integration\n\n**Key Features**:\n\n- Rust-native implementation\n- 1000x faster than Python version\n- AI-powered server parsing\n- Multi-provider support\n\n**Status**: Proof of concept complete\n\n---\n\n## Architecture\n\n```\n┌─────────────────────────────────────────────────────────────┐\n│ Provisioning Platform │\n├─────────────────────────────────────────────────────────────┤\n│ │\n│ ┌──────────────┐ ┌──────────────┐ ┌──────────────┐ │\n│ │ Orchestrator │ │Control Center│ │ API Server │ │\n│ │ :8080 │ │ :9090 │ │ :8083 │ │\n│ └──────┬───────┘ └──────┬───────┘ └──────┬───────┘ │\n│ │ │ │ <20><>