ghaymah-exam-marwan-abdelmoneim-SRE/common-mortakaz/integration-1.md

Mortakaz Integration Spec 1 — Ghaymah SRE Telemetry & Security Hub

Executive Overview

This integration specification defines the data pipeline and authentication protocol connecting Ghaymah Cloud Infrastructure with the Mortakaz Platform. It ensures centralized telemetry ingestion (metrics, logs, traces) and security audit synchronization across all containerized workloads.

---

1. Integration Architecture

┌─────────────────────────────────────────┐
│     Ghaymah Container Platform (SRE)    │
│   • FastAPI App / Prometheus Exporter   │
│   • cAdvisor Container Telemetry        │
└────────────────────┬────────────────────┘
                     │ HTTPS / gRPC (mTLS)
                     ▼
┌─────────────────────────────────────────┐
│     Mortakaz Ingestion Gateway          │
│   • API Endpoint: https://api.mortakaz  │
│   • Authentication: HMAC-SHA256 Token   │
└────────────────────┬────────────────────┘
                     │
                     ▼
┌─────────────────────────────────────────┐
│     Mortakaz Security & Observability   │
│   • Real-Time Threat Analysis           │
│   • Centralized SRE Dashboards          │
└─────────────────────────────────────────┘

---

2. Ingestion API Payload Specification

Ghaymah SRE telemetry agents stream metrics to Mortakaz via POST /v1/telemetry/ingest:

{
  "qabilah_user": "marwanabdelmoneim",
  "email": "marwantamermo@gmail.com",
  "source_platform": "ghaymah.systems",
  "timestamp": "2026-07-27T21:30:00Z",
  "cluster_id": "ghaymah-prod-cluster-01",
  "metrics": {
    "http_latency_p95_ms": 14.2,
    "uptime_percentage": 99.99,
    "total_requests": 14820,
    "active_containers": 39,
    "memory_utilization_pct": 68.4,
    "cpu_utilization_pct": 52.1
  },
  "security_audit": {
    "trivy_scan_status": "PASSED",
    "critical_vulnerabilities": 0,
    "ssl_valid": true,
    "ssl_days_remaining": 49
  }
}

---

3. Security & Authentication Controls

1. Mutual TLS (mTLS): All communication between Ghaymah nodes and Mortakaz Hub is encrypted with X.509 certificates managed by Ghaymah Certificate Authority.
2. API Token Rotation: Rotates HMAC secret keys every 30 days automatically.
3. Data Anonymization: PII fields are sanitized prior to transmission.