root-at-skic
d2f52d43ac
- .archify content is YAML (JSON still accepted); converted to JSON for the renderer - Archify Diagram custom editor is the default for *.archify; Show Source opens the YAML beside it - YAML syntax errors and validation problems mapped to YAML lines - yamlValidation for schema completion with redhat.vscode-yaml - scripts/to-yaml.mjs converts existing .archify files
213 lines
4.3 KiB
Plaintext
213 lines
4.3 KiB
Plaintext
schema_version: 1
|
|
diagram_type: architecture
|
|
meta:
|
|
title: Production Deployment Ownership
|
|
output: examples/production-deployment.html
|
|
visual_preset: blueprint
|
|
animation: trace
|
|
quality_profile: showcase
|
|
engineering_profile: deployment-ownership
|
|
components:
|
|
- id: clients
|
|
type: external
|
|
label: Customers
|
|
sublabel: web + mobile
|
|
pos: [38, 300]
|
|
size: [122, 60]
|
|
- id: edge
|
|
type: cloud
|
|
label: Global Edge
|
|
sublabel: CDN + WAF
|
|
pos: [230, 300]
|
|
size: [126, 60]
|
|
tag: edge team
|
|
- id: gateway
|
|
type: security
|
|
label: API Gateway
|
|
sublabel: public :443
|
|
pos: [430, 300]
|
|
size: [128, 60]
|
|
tag: platform
|
|
- id: api_a
|
|
type: backend
|
|
label: API Pods / AZ-a
|
|
sublabel: private subnet
|
|
pos: [630, 195]
|
|
size: [136, 62]
|
|
tag: app team
|
|
- id: api_b
|
|
type: backend
|
|
label: API Pods / AZ-b
|
|
sublabel: private subnet
|
|
pos: [630, 405]
|
|
size: [136, 62]
|
|
tag: app team
|
|
- id: redis
|
|
type: database
|
|
label: Redis
|
|
sublabel: multi-AZ cache
|
|
pos: [840, 195]
|
|
size: [126, 62]
|
|
tag: platform
|
|
- id: postgres
|
|
type: database
|
|
label: PostgreSQL
|
|
sublabel: primary / encrypted
|
|
pos: [840, 405]
|
|
size: [126, 62]
|
|
tag: data team
|
|
- id: events
|
|
type: messagebus
|
|
label: Event Bus
|
|
sublabel: orders.v1
|
|
pos: [1040, 300]
|
|
size: [126, 60]
|
|
tag: platform
|
|
- id: worker
|
|
type: backend
|
|
label: Workers
|
|
sublabel: private workload
|
|
pos: [1190, 300]
|
|
size: [126, 60]
|
|
tag: app team
|
|
- id: replica
|
|
type: database
|
|
label: DR Replica
|
|
sublabel: eu-west-1
|
|
pos: [1040, 578]
|
|
size: [126, 62]
|
|
tag: data team
|
|
- id: audit
|
|
type: cloud
|
|
label: Audit Archive
|
|
sublabel: immutable objects
|
|
pos: [1190, 450]
|
|
size: [126, 62]
|
|
tag: security
|
|
- id: observability
|
|
type: external
|
|
label: Observability
|
|
sublabel: metrics + traces
|
|
pos: [1190, 85]
|
|
size: [126, 62]
|
|
tag: SRE
|
|
boundaries:
|
|
- kind: region
|
|
label: AWS us-east-1 / production
|
|
wraps:
|
|
- edge
|
|
- gateway
|
|
- api_a
|
|
- api_b
|
|
- redis
|
|
- postgres
|
|
- events
|
|
- worker
|
|
- audit
|
|
pad: 20
|
|
- kind: security-group
|
|
label: private application network
|
|
wraps:
|
|
- api_a
|
|
- api_b
|
|
- redis
|
|
- postgres
|
|
- events
|
|
- worker
|
|
pad: 14
|
|
- kind: region
|
|
label: AWS eu-west-1 / disaster recovery
|
|
wraps:
|
|
- replica
|
|
- kind: security-group
|
|
label: DR private subnet
|
|
wraps:
|
|
- replica
|
|
pad: 14
|
|
connections:
|
|
- from: clients
|
|
to: edge
|
|
label: HTTPS
|
|
variant: emphasis
|
|
- from: edge
|
|
to: gateway
|
|
label: mTLS
|
|
variant: security
|
|
- from: gateway
|
|
to: api_a
|
|
label: VPC route
|
|
variant: emphasis
|
|
route: orthogonal-h
|
|
labelAt: [594, 275]
|
|
- from: gateway
|
|
to: api_b
|
|
label: VPC route
|
|
variant: emphasis
|
|
route: orthogonal-h
|
|
labelAt: [594, 385]
|
|
- from: api_a
|
|
to: redis
|
|
label: cache
|
|
route: straight
|
|
- from: api_b
|
|
to: postgres
|
|
label: SQL
|
|
route: straight
|
|
- from: api_a
|
|
to: events
|
|
label: publish
|
|
variant: dashed
|
|
fromSide: top
|
|
toSide: top
|
|
via:
|
|
- [698, 170]
|
|
- [1103, 170]
|
|
- from: api_b
|
|
to: events
|
|
variant: dashed
|
|
fromSide: top
|
|
toSide: bottom
|
|
via:
|
|
- [698, 380]
|
|
- [1103, 380]
|
|
- from: events
|
|
to: worker
|
|
variant: emphasis
|
|
- from: postgres
|
|
to: replica
|
|
label: cross-region WAL
|
|
variant: security
|
|
route: orthogonal-v
|
|
labelAt: [1003, 529]
|
|
- from: worker
|
|
to: audit
|
|
label: evidence
|
|
variant: dashed
|
|
fromSide: bottom
|
|
toSide: top
|
|
labelDy: 58
|
|
- from: worker
|
|
to: observability
|
|
label: OTLP
|
|
variant: dashed
|
|
route: orthogonal-v
|
|
cards:
|
|
- dot: cyan
|
|
title: Runtime Ownership
|
|
items:
|
|
- Platform owns the edge, gateway, cache, and event bus
|
|
- Application teams own API pods and workers
|
|
- Data owns primary and disaster-recovery state
|
|
- dot: rose
|
|
title: Named Crossings
|
|
items:
|
|
- Public HTTPS terminates at the managed edge
|
|
- mTLS crosses into the application network
|
|
- Cross-region WAL is explicit and encrypted
|
|
- dot: emerald
|
|
title: Operational Evidence
|
|
items:
|
|
- Workers emit traces to SRE-owned observability
|
|
- Audit evidence lands in immutable storage
|
|
- Unknown placement should remain marked, never invented
|