Prometheus logo

version: "1.0" meta: title: Sandgate — one platform, four hundred tenants defaults: cornerRadius: 8 fidelity: 1 shapes: - id: edge kind: container label: Edge — where a tenant is decided x: 244 y: 40 w: 360 h: 206 layer: blueprint fill: var(--fill-blue) fillOpacity: 0.5 labelAnchor: top-left stroke: var(--stroke-blue) strokeStyle: dashed textColor: var(--stroke-blue) - id: control kind: container label: Control plane — one per platform, off the serve path x: 716 y: 40 w: 749 h: 206 layer: blueprint fill: var(--fill-violet) fillOpacity: 0.5 labelAnchor: top-left stroke: var(--stroke-violet) strokeStyle: dashed textColor: var(--stroke-violet) - id: pooled kind: container label: Data plane — pooled, 391 tenants x: 236.5 y: 384 w: 558 h: 202 layer: blueprint fill: var(--fill-teal) fillOpacity: 0.5 labelAnchor: top-left stroke: var(--stroke-teal) strokeStyle: dashed textColor: var(--stroke-teal) - id: silo kind: container label: Data plane — siloed, 9 tenants x: 926.5 y: 384 w: 342 h: 202 layer: blueprint fill: var(--fill-amber) fillOpacity: 0.5 labelAnchor: top-left stroke: var(--stroke-amber) strokeStyle: dashed textColor: var(--stroke-amber) - id: shared kind: container label: Shared services — a tenant id on every call x: 40 y: 724 w: 1425 h: 202 layer: blueprint fill: var(--fill-green) fillOpacity: 0.5 labelAnchor: top-left stroke: var(--stroke-green) strokeStyle: dashed textColor: var(--stroke-green) - id: tenants kind: icon label: |- 400 tenants 38k users x: 40 y: 88 w: 92 h: 72 layer: blueprint iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/users license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- stroke: var(--stroke-blue) - id: gateway kind: icon label: |- API gateway TLS, WAF x: 278.5 y: 110 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/globe license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: edge - id: resolver kind: icon label: |- Tenant resolver host or claim x: 498.5 y: 102 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/arrow-right-left license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: edge - id: registry kind: icon label: |- Tenant registry the only map x: 756 y: 102 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/clipboard-list license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: control - id: provision kind: icon label: |- Provisioning signup to live x: 967 y: 110 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/user-check license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: control - id: plans kind: icon label: |- Plans and flags per tenant x: 1171 y: 102 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/flag license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: parent: control - id: billing kind: icon label: |- Billing usage rated x: 1364.5 y: 110 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/credit-card license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: control - id: api kind: icon label: |- API service stateless x: 271 y: 452 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/server license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: pooled - id: workers kind: icon label: |- Workers queue per tenant x: 473 y: 444 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/boxes license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: pooled - id: pgpool kind: icon label: |- Postgres pooled RLS everywhere x: 685.5 y: 444 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/database license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: pooled - id: silorun kind: icon label: |- Dedicated stack same image x: 957.5 y: 444 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/container license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: silo - id: pgsilo kind: icon label: |- Postgres per tenant same schema x: 1166.5 y: 444 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/database license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: silo - id: authn kind: icon label: |- Identity SSO per tenant x: 308 y: 792 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/key-round license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: shared - id: files kind: icon label: |- Object store prefix per tenant x: 523 y: 784 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/archive license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: shared - id: searchidx kind: icon label: |- Search index per tenant x: 720.5 y: 784 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/search license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: shared - id: audit kind: icon label: |- Audit log append only x: 914.5 y: 792 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/file-text license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: shared - id: metrics kind: icon label: |- Metrics tenant-labelled x: 1129.5 y: 792 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://www.cncf.io/brand-guidelines/ holder: Cloud Native Computing Foundation / individual project owners iconId: cncf/prometheus license: Trademark source: vendor sourceUrl: https://www.cncf.io/brand-guidelines/ iconConstraints: lockAspect: true lockColors: true lockRotation: false iconSvg: parent: shared connectors: - id: e-1-tenants-gateway from: shape: tenants anchor: auto to: shape: gateway anchor: auto label: HTTPS layer: blueprint routing: curved toMarker: arrow - id: e-2-gateway-resolver from: shape: gateway anchor: auto to: shape: resolver anchor: auto label: 1 · resolve layer: blueprint routing: curved toMarker: arrow - id: e-3-resolver-registry from: shape: resolver anchor: auto to: shape: registry anchor: auto label: 2 · look up layer: blueprint routing: curved toMarker: arrow stroke: var(--stroke-violet) - id: e-4-registry-provision from: shape: registry anchor: auto to: shape: provision anchor: auto layer: blueprint routing: curved style: dashed toMarker: none - id: e-5-registry-plans from: shape: registry anchor: auto to: shape: plans anchor: auto layer: blueprint routing: curved style: dashed toMarker: none - id: e-6-plans-billing from: shape: plans anchor: auto to: shape: billing anchor: auto label: rates layer: blueprint routing: curved style: dotted toMarker: arrow - id: e-7-resolver-api from: shape: resolver anchor: auto to: shape: api anchor: auto label: 3 · pooled layer: blueprint routing: curved toMarker: arrow stroke: var(--stroke-teal) - id: e-8-resolver-silorun from: shape: resolver anchor: auto to: shape: silorun anchor: auto label: 3 · siloed layer: blueprint routing: curved toMarker: arrow stroke: var(--stroke-amber) - id: e-9-api-workers from: shape: api anchor: auto to: shape: workers anchor: auto layer: blueprint routing: curved toMarker: none - id: e-10-workers-pgpool from: shape: workers anchor: auto to: shape: pgpool anchor: auto label: 4 · SET tenant layer: blueprint routing: curved toMarker: arrow stroke: var(--stroke-teal) - id: e-11-silorun-pgsilo from: shape: silorun anchor: auto to: shape: pgsilo anchor: auto label: 4 · own db layer: blueprint routing: curved toMarker: arrow stroke: var(--stroke-amber) - id: e-12-api-authn from: shape: api anchor: auto to: shape: authn anchor: auto label: 5 · verify layer: blueprint routing: curved toMarker: arrow stroke: var(--stroke-green) - id: e-13-api-files from: shape: api anchor: auto to: shape: files anchor: auto layer: blueprint routing: curved style: dotted toMarker: arrow stroke: var(--stroke-green) - id: e-14-api-searchidx from: shape: api anchor: auto to: shape: searchidx anchor: auto layer: blueprint routing: curved style: dotted toMarker: arrow stroke: var(--stroke-green) - id: e-15-api-audit from: shape: api anchor: auto to: shape: audit anchor: auto label: every write layer: blueprint routing: curved toMarker: arrow stroke: var(--stroke-green) - id: e-16-api-metrics from: shape: api anchor: auto to: shape: metrics anchor: auto layer: blueprint routing: curved style: dotted toMarker: arrow stroke: var(--stroke-green) annotations: []

Multi-tenant SaaS — one platform, four hundred tenants

The platform