Prometheus logo

version: "1.0" meta: title: "Sandgate: one platform, four hundred tenants" defaults: cornerRadius: 8 fidelity: 1 shapes: - id: edge kind: container label: "Edge: where a tenant is decided" x: 244 y: 40 w: 360 h: 206 layer: blueprint fill: var(--fill-blue) fillOpacity: 0.5 labelAnchor: top-left stroke: var(--stroke-blue) strokeStyle: dashed textColor: var(--stroke-blue) - id: control kind: container label: "Control plane: one per platform, off the serve path" x: 716 y: 40 w: 749 h: 206 layer: blueprint fill: var(--fill-violet) fillOpacity: 0.5 labelAnchor: top-left stroke: var(--stroke-violet) strokeStyle: dashed textColor: var(--stroke-violet) - id: pooled kind: container label: "Data plane: pooled, 391 tenants" x: 236.5 y: 384 w: 558 h: 202 layer: blueprint fill: var(--fill-teal) fillOpacity: 0.5 labelAnchor: top-left stroke: var(--stroke-teal) strokeStyle: dashed textColor: var(--stroke-teal) - id: silo kind: container label: "Data plane: siloed, 9 tenants" x: 926.5 y: 384 w: 342 h: 202 layer: blueprint fill: var(--fill-amber) fillOpacity: 0.5 labelAnchor: top-left stroke: var(--stroke-amber) strokeStyle: dashed textColor: var(--stroke-amber) - id: shared kind: container label: "Shared services: a tenant id on every call" x: 40 y: 724 w: 1425 h: 202 layer: blueprint fill: var(--fill-green) fillOpacity: 0.5 labelAnchor: top-left stroke: var(--stroke-green) strokeStyle: dashed textColor: var(--stroke-green) - id: tenants kind: icon label: |- 400 tenants 38k users x: 40 y: 88 w: 92 h: 72 layer: blueprint iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/users license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- stroke: var(--stroke-blue) - id: gateway kind: icon label: |- API gateway TLS, WAF x: 278.5 y: 110 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/globe license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: edge - id: resolver kind: icon label: |- Tenant resolver host or claim x: 498.5 y: 102 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/arrow-right-left license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: edge - id: registry kind: icon label: |- Tenant registry the only map x: 756 y: 102 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/clipboard-list license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: control - id: provision kind: icon label: |- Provisioning signup to live x: 967 y: 110 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/user-check license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: control - id: plans kind: icon label: |- Plans and flags per tenant x: 1171 y: 102 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/flag license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: parent: control - id: billing kind: icon label: |- Billing usage rated x: 1364.5 y: 110 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/credit-card license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: control - id: api kind: icon label: |- API service stateless x: 271 y: 452 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/server license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: pooled - id: workers kind: icon label: |- Workers queue per tenant x: 473 y: 444 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/boxes license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: pooled - id: pgpool kind: icon label: |- Postgres pooled RLS everywhere x: 685.5 y: 444 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/database license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: pooled - id: silorun kind: icon label: |- Dedicated stack same image x: 957.5 y: 444 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/container license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: silo - id: pgsilo kind: icon label: |- Postgres per tenant same schema x: 1166.5 y: 444 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/database license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: silo - id: authn kind: icon label: |- Identity SSO per tenant x: 308 y: 792 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/key-round license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: shared - id: files kind: icon label: |- Object store prefix per tenant x: 523 y: 784 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/archive license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: shared - id: searchidx kind: icon label: |- Search index per tenant x: 720.5 y: 784 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/search license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: shared - id: audit kind: icon label: |- Audit log append only x: 914.5 y: 792 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://lucide.dev/license holder: Lucide Icons and Contributors iconId: lucide/file-text license: Trademark source: vendor sourceUrl: https://lucide.dev/license iconConstraints: lockAspect: true lockColors: false lockRotation: false iconSvg: |- parent: shared - id: metrics kind: icon label: |- Metrics tenant-labelled x: 1129.5 y: 792 w: 64 h: 64 layer: blueprint frame: square iconAttribution: guidelinesUrl: https://www.cncf.io/brand-guidelines/ holder: Cloud Native Computing Foundation / individual project owners iconId: cncf/prometheus license: Trademark source: vendor sourceUrl: https://www.cncf.io/brand-guidelines/ iconConstraints: lockAspect: true lockColors: true lockRotation: false iconSvg: parent: shared connectors: - id: e-1-tenants-gateway z: 1 from: shape: tenants anchor: - 1 - 0.5486111111111112 to: shape: gateway anchor: - 0 - 0.2734375 label: HTTPS layer: blueprint routing: straight toMarker: arrow meta: blueprintr.autoPolish: 2 - id: e-2-gateway-resolver z: 2 from: shape: gateway anchor: top to: shape: resolver anchor: left label: 1 · resolve layer: blueprint routing: orthogonal toMarker: arrow meta: blueprintr.autoPolish: 2 waypoints: - x: 486.5 y: 98 - x: 486.5 y: 134 - id: e-3-resolver-registry z: 3 from: shape: resolver anchor: auto to: shape: registry anchor: auto label: 2 · look up layer: blueprint routing: curved toMarker: arrow stroke: var(--stroke-violet) labelPosition: 0.25 - id: e-4-registry-provision z: 4 from: shape: registry anchor: auto to: shape: provision anchor: auto layer: blueprint routing: curved style: dashed toMarker: none - id: e-5-registry-plans z: 5 from: shape: registry anchor: right to: shape: plans anchor: top layer: blueprint routing: orthogonal style: dashed toMarker: none meta: blueprintr.autoPolish: 2 waypoints: - x: 864 y: 90 - x: 1203 y: 90 - id: e-6-plans-billing z: 6 from: shape: plans anchor: - 1 - 0.5234375 to: shape: billing anchor: - 0 - 0.3984375 label: rates layer: blueprint routing: straight style: dotted toMarker: arrow meta: blueprintr.autoPolish: 2 - id: e-7-resolver-api z: 7 from: shape: resolver anchor: left to: shape: api anchor: left label: 3 · pooled layer: blueprint routing: orthogonal toMarker: arrow stroke: var(--stroke-teal) meta: blueprintr.autoPolish: 2 waypoints: - x: 467 y: 380 - x: 232.5 y: 380 - x: 232.5 y: 484 labelPosition: 0.236 - id: e-8-resolver-silorun z: 8 from: shape: resolver anchor: top to: shape: silorun anchor: - 0 - 0.125 label: 3 · siloed layer: blueprint routing: orthogonal toMarker: arrow stroke: var(--stroke-amber) meta: blueprintr.autoPolish: 2 waypoints: - x: 846 y: 90 - x: 846 y: 452 labelPosition: 0.212 - id: e-9-api-workers z: 9 from: shape: api anchor: top to: shape: workers anchor: left layer: blueprint routing: orthogonal toMarker: none meta: blueprintr.autoPolish: 2 waypoints: - x: 461 y: 440 - x: 461 y: 476 - id: e-10-workers-pgpool z: 10 from: shape: workers anchor: auto to: shape: pgpool anchor: auto label: 4 · SET tenant layer: blueprint routing: curved toMarker: arrow stroke: var(--stroke-teal) labelPosition: 0.5 - id: e-11-silorun-pgsilo z: 11 from: shape: silorun anchor: auto to: shape: pgsilo anchor: auto label: 4 · own db layer: blueprint routing: curved toMarker: arrow stroke: var(--stroke-amber) labelPosition: 0.5 - id: e-12-api-authn z: 12 from: shape: api anchor: right to: shape: authn anchor: right label: 5 · verify layer: blueprint routing: orthogonal toMarker: arrow stroke: var(--stroke-green) meta: blueprintr.autoPolish: 2 waypoints: - x: 384 y: 824 - id: e-13-api-files z: 13 from: shape: api anchor: left to: shape: files anchor: - 0.1171875 - 0 layer: blueprint routing: orthogonal style: dotted toMarker: arrow stroke: var(--stroke-green) meta: blueprintr.autoPolish: 2 waypoints: - x: 259 y: 506 - x: 248.5 y: 506 - x: 248.5 y: 720 - x: 530.5 y: 720 - id: e-14-api-searchidx z: 14 from: shape: api anchor: right to: shape: searchidx anchor: top layer: blueprint routing: orthogonal style: dotted toMarker: arrow stroke: var(--stroke-green) meta: blueprintr.autoPolish: 2 waypoints: - x: 347 y: 506 - x: 457.5 y: 506 - x: 457.5 y: 665 - x: 752.5 y: 665 - id: e-15-api-audit z: 15 from: shape: api anchor: left to: shape: audit anchor: - 0 - 0.234375 label: every write layer: blueprint routing: orthogonal toMarker: arrow stroke: var(--stroke-green) meta: blueprintr.autoPolish: 2 waypoints: - x: 259 y: 418 - x: 818 y: 418 - x: 818 y: 807 - id: e-16-api-metrics z: 16 from: shape: api anchor: top to: shape: metrics anchor: - 0 - 0.3046875 layer: blueprint routing: orthogonal style: dotted toMarker: arrow stroke: var(--stroke-green) meta: blueprintr.autoPolish: 2 waypoints: - x: 800 y: 432 - x: 800 y: 780 - x: 1117.5 y: 780 - x: 1117.5 y: 811.5 annotations: []

Multi-tenant SaaS platform

Multi-tenant SaaS platform

The platform