70 أسطر
2.8 KiB
Markdown
70 أسطر
2.8 KiB
Markdown
# Mortakaz Integration Spec 1 — Ghaymah SRE Telemetry & Security Hub
|
|
|
|
## Executive Overview
|
|
|
|
This integration specification defines the data pipeline and authentication protocol connecting **Ghaymah Cloud Infrastructure** with the **Mortakaz Platform**. It ensures centralized telemetry ingestion (metrics, logs, traces) and security audit synchronization across all containerized workloads.
|
|
|
|
---
|
|
|
|
## 1. Integration Architecture
|
|
|
|
```
|
|
┌─────────────────────────────────────────┐
|
|
│ Ghaymah Container Platform (SRE) │
|
|
│ • FastAPI App / Prometheus Exporter │
|
|
│ • cAdvisor Container Telemetry │
|
|
└────────────────────┬────────────────────┘
|
|
│ HTTPS / gRPC (mTLS)
|
|
▼
|
|
┌─────────────────────────────────────────┐
|
|
│ Mortakaz Ingestion Gateway │
|
|
│ • API Endpoint: https://api.mortakaz │
|
|
│ • Authentication: HMAC-SHA256 Token │
|
|
└────────────────────┬────────────────────┘
|
|
│
|
|
▼
|
|
┌─────────────────────────────────────────┐
|
|
│ Mortakaz Security & Observability │
|
|
│ • Real-Time Threat Analysis │
|
|
│ • Centralized SRE Dashboards │
|
|
└─────────────────────────────────────────┘
|
|
```
|
|
|
|
---
|
|
|
|
## 2. Ingestion API Payload Specification
|
|
|
|
Ghaymah SRE telemetry agents stream metrics to Mortakaz via `POST /v1/telemetry/ingest`:
|
|
|
|
```json
|
|
{
|
|
"qabilah_user": "marwanabdelmoneim",
|
|
"email": "marwantamermo@gmail.com",
|
|
"source_platform": "ghaymah.systems",
|
|
"timestamp": "2026-07-27T21:30:00Z",
|
|
"cluster_id": "ghaymah-prod-cluster-01",
|
|
"metrics": {
|
|
"http_latency_p95_ms": 14.2,
|
|
"uptime_percentage": 99.99,
|
|
"total_requests": 14820,
|
|
"active_containers": 39,
|
|
"memory_utilization_pct": 68.4,
|
|
"cpu_utilization_pct": 52.1
|
|
},
|
|
"security_audit": {
|
|
"trivy_scan_status": "PASSED",
|
|
"critical_vulnerabilities": 0,
|
|
"ssl_valid": true,
|
|
"ssl_days_remaining": 49
|
|
}
|
|
}
|
|
```
|
|
|
|
---
|
|
|
|
## 3. Security & Authentication Controls
|
|
|
|
1. **Mutual TLS (mTLS)**: All communication between Ghaymah nodes and Mortakaz Hub is encrypted with X.509 certificates managed by Ghaymah Certificate Authority.
|
|
2. **API Token Rotation**: Rotates HMAC secret keys every 30 days automatically.
|
|
3. **Data Anonymization**: PII fields are sanitized prior to transmission.
|