{ "date": "2026-03-30", "generator": "construction/derive-public-service-catalog.py", "source_documents": [ "knowledge/deployment/public-entrypoint-catalog.json", "knowledge/repos/*/interfaces/*.json" ], "scope_notes": [ "catalog is derived from deployment-side public entrypoint scan plus repo interface artifacts", "catalog filters obvious cleanup and readonly noise", "public status is heuristic and should not be treated as final product taxonomy", "gateway-routed entries may still need host resolution through shared gateway config joins" ], "summary": { "catalog_entry_count": 14, "confirmed_external_entrypoint_count": 9, "shared_gateway_exposure_count": 5, "deployment_exposed_candidate_count": 3, "audience_counts": { "shared_gateway_api": 5, "tenant_data_api": 1, "unknown": 2, "regional_api": 3, "preview_web": 1, "tenant_observability": 1, "operator_api": 1 }, "public_signal_counts": { "medium": 7, "high": 7 } }, "services": [ { "service_id": "public-service:dedicated-regional-server", "deployment_object": "dedicated-regional-server", "source_owner": "tidbcloud/infra-provider", "exposure_status": "confirmed_external_entrypoint", "public_signal": "high", "audience": "regional_api", "host_patterns": [ "af-south-1.regional-api.prod.aws.tidbcloud.com", "ap-east-1.regional-api.prod.aws.tidbcloud.com", "ap-northeast-1.regional-api.prod.aws.tidbcloud.com", "ap-northeast-2.regional-api.prod.aws.tidbcloud.com", "ap-northeast-3.regional-api.prod.aws.tidbcloud.com", "ap-south-1.regional-api.prod.aws.tidbcloud.com", "ap-southeast-1.regional-api.prod.aws.tidbcloud.com", "ap-southeast-2.regional-api.prod.aws.tidbcloud.com", "ap-southeast-3-def.regional-api.prod.aws.tidbcloud.com", "ap-southeast-5.regional-api.prod.aws.tidbcloud.com", "ap-southeast-7.regional-api.prod.aws.tidbcloud.com", "asia-east1.regional-api.prod.gcp.tidbcloud.com", "asia-east2.regional-api.prod.gcp.tidbcloud.com", "asia-northeast1.regional-api.prod.gcp.tidbcloud.com", "asia-northeast2.regional-api.prod.gcp.tidbcloud.com", "asia-south1.regional-api.prod.gcp.tidbcloud.com", "asia-southeast1.regional-api.prod.gcp.tidbcloud.com", "eu-central-1.regional-api.prod.aws.tidbcloud.com", "eu-west-1.regional-api.prod.aws.tidbcloud.com", "europe-west3.regional-api.prod.gcp.tidbcloud.com", "regional-api.eastus.dev.azure.tidbcloud.com", "regional-api.eastus2-testinfra.prod.azure.tidbcloud.com", "regional-api.eastus2.dev.azure.tidbcloud.com", "regional-api.eastus2.prod.azure.tidbcloud.com", "regional-api.eastus2.staging.azure.tidbcloud.com", "regional-api.japaneast.prod.azure.tidbcloud.com", "regional-api.southeastasia-chengfei.dev.azure.tidbcloud.com", "regional-api.southeastasia.dev.azure.tidbcloud.com", "regional-api.southeastasia.prod.azure.tidbcloud.com", "regional-api.southeastasia.staging.azure.tidbcloud.com", "regional-api.westeurope.prod.azure.tidbcloud.com", "sa-east-1.regional-api.prod.aws.tidbcloud.com", "us-central1.regional-api.prod.gcp.tidbcloud.com", "us-central1.regional-api.staging.gcp.tidbcloud.com", "us-east-1-ng.regional-api.dev.aws.tidbcloud.com", "us-east-1.regional-api.dev.aws.tidbcloud.com", "us-east-1.regional-api.prod.aws.tidbcloud.com", "us-east-1.regional-api.staging.aws.tidbcloud.com", "us-east-2.regional-api.prod.aws.tidbcloud.com", "us-east4.regional-api.prod.gcp.tidbcloud.com", "us-west-2-lyc.regional-api.prod.aws.tidbcloud.com", "us-west-2-lyc.regional-api.staging.aws.tidbcloud.com", "us-west-2-mjp.regional-api.staging.aws.tidbcloud.com", "us-west-2.regional-api.dev.aws.tidbcloud.com", "us-west-2.regional-api.prod.aws.tidbcloud.com", "us-west-2.regional-api.staging.aws.tidbcloud.com", "us-west1.regional-api.dev.gcp.tidbcloud.com", "us-west1.regional-api.prod.gcp.tidbcloud.com", "us-west1.regional-api.staging.gcp.tidbcloud.com", "us-west2.regional-api.dev.gcp.tidbcloud.com" ], "path_prefixes": [ "/" ], "backend_services": [ "regional-server" ], "exposure_surfaces": [ "gateway", "httproute" ], "host_family_hint": null, "interface_artifacts": [ "knowledge/repos/infra-provider/interfaces/regional-server.json" ], "interface_summaries": [ { "file": "knowledge/repos/infra-provider/interfaces/regional-server.json", "binary": "regional-server", "type": null, "service_count": 4, "sample_services": [ { "name": "MetricsService", "type": "http", "method_count": 1 }, { "name": "ProbeService", "type": "http", "method_count": 2 }, { "name": "DedicatedRegionalAPI", "type": "http", "method_count": 11 }, { "name": "RegionalControllers", "type": "controller", "method_count": 1 } ] } ], "example_evidence": [ { "source_file": "dedicated-regional-server/gateway-crds/base/kong-gateway.yaml", "reachability": "gateway_routed_unknown_host", "host": null, "path": null, "backend_service": null }, { "source_file": "dedicated-regional-server/gateway-crds/base/kong-gateway.yaml", "reachability": "public_dns", "host": "us-west-2.regional-api.dev.aws.tidbcloud.com", "path": null, "backend_service": null }, { "source_file": "dedicated-regional-server/gateway-crds/envs/dev-eastus/kong-gateway.yaml", "reachability": "gateway_routed_unknown_host", "host": null, "path": null, "backend_service": null }, { "source_file": "dedicated-regional-server/gateway-crds/envs/dev-eastus/kong-gateway.yaml", "reachability": "public_dns", "host": "regional-api.eastus.dev.azure.tidbcloud.com", "path": null, "backend_service": null }, { "source_file": "dedicated-regional-server/gateway-crds/envs/dev-eastus2/kong-gateway.yaml", "reachability": "gateway_routed_unknown_host", "host": null, "path": null, "backend_service": null }, { "source_file": "dedicated-regional-server/gateway-crds/envs/dev-eastus2/kong-gateway.yaml", "reachability": "public_dns", "host": "regional-api.eastus2.dev.azure.tidbcloud.com", "path": null, "backend_service": null } ], "record_count": 107 }, { "service_id": "public-service:nextgen-regional-control-plane", "deployment_object": "nextgen-regional-control-plane", "source_owner": "next-gen regional platform bundle", "exposure_status": "confirmed_external_entrypoint", "public_signal": "high", "audience": "regional_api", "host_patterns": [ "ap-northeast-1-ng.regional-api.prod.aws.tidbcloud.com", "ap-southeast-1-e2e.regional-api.prod.aws.tidbcloud.com", "ap-southeast-1-mjp.regional-api.staging.aliyun.tidbcloud.com", "ap-southeast-1-ng.regional-api.prod.aliyun.tidbcloud.com", "ap-southeast-1-ng.regional-api.prod.aws.tidbcloud.com", "ap-southeast-1-ng.regional-api.staging.aliyun.tidbcloud.com", "ap-southeast-1-pioneer.regional-api.dev.aliyun.tidbcloud.com", "ap-southeast-1.regional-api.dev.aliyun.tidbcloud.com", "ap-southeast-1.regional-api.prod.aliyun.tidbcloud.com", "ap-southeast-1.regional-api.staging.aliyun.tidbcloud.com", "ap-southeast-2-ng.regional-api.prod.aws.tidbcloud.com", "ap-southeast-3-weekly.regional-api.dev.aliyun.tidbcloud.com", "cn-hongkong-ng.regional-api.prod.aliyun.tidbcloud.com", "regional-api.eastus.dev.azure.tidbcloud.com", "regional-api.eastus.staging.azure.tidbcloud.com", "us-east-1-byoc-poc.regional-api.prod.aws.tidbcloud.com", "us-east-1.regional-api.dev.aws.tidbcloud.com", "us-west-2-byoc-0303.regional-api.dev.aws.tidbcloud.com", "us-west-2-ng-0711.regional-api.staging.aws.tidbcloud.com", "us-west-2-ng.regional-api.prod.aws.tidbcloud.com", "us-west-2-pov.regional-api.prod.aws.tidbcloud.com", "us-west-2.regional-api.dev.aws.tidbcloud.com", "westus3-ng.regional-api.dev.azure.tidbcloud.com", "westus3-ng.regional-api.prod.azure.tidbcloud.com", "westus3-ng.regional-api.staging.azure.tidbcloud.com" ], "path_prefixes": [ "/dataplane-manager", "/ticdc-service", "/traffic-replay" ], "backend_services": [ "dataplane-manager", "ticdc-service-server", "traffic-replay-server" ], "exposure_surfaces": [ "gateway", "httproute" ], "host_family_hint": null, "interface_artifacts": [], "interface_summaries": [], "example_evidence": [ { "source_file": "dev/nextgen-regional-control-plane/dataplane-manager/base/httproute.yaml", "reachability": "gateway_routed_unknown_host", "host": null, "path": "/dataplane-manager", "backend_service": "dataplane-manager" }, { "source_file": "dev/nextgen-regional-control-plane/gateway-crds/base/kong-gateway.yaml", "reachability": "gateway_routed_unknown_host", "host": null, "path": null, "backend_service": null }, { "source_file": "dev/nextgen-regional-control-plane/gateway-crds/base/kong-gateway.yaml", "reachability": "public_dns", "host": "us-west-2.regional-api.dev.aws.tidbcloud.com", "path": null, "backend_service": null }, { "source_file": "dev/nextgen-regional-control-plane/gateway-crds/envs/dev-ap-southeast-1-pioneer/kong-gateway.yaml", "reachability": "gateway_routed_unknown_host", "host": null, "path": null, "backend_service": null }, { "source_file": "dev/nextgen-regional-control-plane/gateway-crds/envs/dev-ap-southeast-1-pioneer/kong-gateway.yaml", "reachability": "public_dns", "host": "ap-southeast-1-pioneer.regional-api.dev.aliyun.tidbcloud.com", "path": null, "backend_service": null }, { "source_file": "dev/nextgen-regional-control-plane/gateway-crds/envs/dev-ap-southeast-3-weekly/kong-gateway.yaml", "reachability": "gateway_routed_unknown_host", "host": null, "path": null, "backend_service": null } ], "record_count": 68 }, { "service_id": "public-service:serverless-regional-service", "deployment_object": "serverless-regional-service", "source_owner": "tidbcloud/serverless-service", "exposure_status": "confirmed_external_entrypoint", "public_signal": "high", "audience": "regional_api", "host_patterns": [ "regionalsvc01.ap-east-1.prod.aws.tidbcloud.com", "regionalsvc01.ap-northeast-1.prod.alicloud.tidbcloud.com", "regionalsvc01.ap-northeast-1.prod.aws.tidbcloud.com", "regionalsvc01.ap-south-1.prod.aws.tidbcloud.com", "regionalsvc01.ap-southeast-1.dev.shared.alicloud.tidbcloud.com", "regionalsvc01.ap-southeast-1.prod.alicloud.tidbcloud.com", "regionalsvc01.ap-southeast-1.prod.aws.tidbcloud.com", "regionalsvc01.ap-southeast-5.prod.alicloud.tidbcloud.com", "regionalsvc01.cn-hongkong.prod.alicloud.tidbcloud.com", "regionalsvc01.eu-central-1.prod.aws.tidbcloud.com", "regionalsvc01.na-south-1.prod.alicloud.tidbcloud.com", "regionalsvc01.us-east-1.dev.shared.aws.tidbcloud.com", "regionalsvc01.us-east-1.prod.alicloud.tidbcloud.com", "regionalsvc01.us-east-1.prod.aws.tidbcloud.com", "regionalsvc01.us-east-1.staging.shared.aws.tidbcloud.com", "regionalsvc01.us-west-2.prod.aws.tidbcloud.com", "regionalsvc02.us-east-1.dev.qa.shared.aws.tidbcloud.com" ], "path_prefixes": [ "/" ], "backend_services": [ "new-serverless-regional-service" ], "exposure_surfaces": [ "ingress" ], "host_family_hint": null, "interface_artifacts": [ "knowledge/repos/serverless-service/interfaces/cmd-server.json" ], "interface_summaries": [ { "file": "knowledge/repos/serverless-service/interfaces/cmd-server.json", "binary": "server", "type": null, "service_count": 36, "sample_services": [ { "name": "ServerlessServiceLifecycle", "type": null, "method_count": 7 }, { "name": "ServerlessHTTPMode", "type": null, "method_count": 5 }, { "name": "ServerlessGRPCMode", "type": null, "method_count": 4 }, { "name": "ServerlessWorkerMode", "type": null, "method_count": 5 }, { "name": "ServerlessBRWorkerMode", "type": null, "method_count": 3 }, { "name": "ServerlessJobMode", "type": null, "method_count": 2 } ] } ], "example_evidence": [ { "source_file": "serverless-regional-service/envs/dev-ali-ap-southeast-1/ingress.yaml", "reachability": "public_dns", "host": "regionalsvc01.ap-southeast-1.dev.shared.alicloud.tidbcloud.com", "path": "/", "backend_service": "new-serverless-regional-service" }, { "source_file": "serverless-regional-service/envs/dev-aws-us-east-1-f02/ingress.yaml", "reachability": "public_dns", "host": "regionalsvc02.us-east-1.dev.qa.shared.aws.tidbcloud.com", "path": "/", "backend_service": "new-serverless-regional-service" }, { "source_file": "serverless-regional-service/envs/dev-aws-us-east-1/ingress.yaml", "reachability": "public_dns", "host": "regionalsvc01.us-east-1.dev.shared.aws.tidbcloud.com", "path": "/", "backend_service": "new-serverless-regional-service" }, { "source_file": "serverless-regional-service/envs/prod-ali-ap-northeast-1/ingress.yaml", "reachability": "public_dns", "host": "regionalsvc01.ap-northeast-1.prod.alicloud.tidbcloud.com", "path": "/", "backend_service": "new-serverless-regional-service" }, { "source_file": "serverless-regional-service/envs/prod-ali-ap-southeast-1/ingress.yaml", "reachability": "public_dns", "host": "regionalsvc01.ap-southeast-1.prod.alicloud.tidbcloud.com", "path": "/", "backend_service": "new-serverless-regional-service" }, { "source_file": "serverless-regional-service/envs/prod-ali-ap-southeast-5/ingress.yaml", "reachability": "public_dns", "host": "regionalsvc01.ap-southeast-5.prod.alicloud.tidbcloud.com", "path": "/", "backend_service": "new-serverless-regional-service" } ], "record_count": 17 }, { "service_id": "public-service:metrics-integration", "deployment_object": "metrics-integration", "source_owner": "tidbcloud/metrics-integration", "exposure_status": "confirmed_external_entrypoint", "public_signal": "medium", "audience": "unknown", "host_patterns": [], "path_prefixes": [], "backend_services": [ "metrics-integration-regional-service-lb" ], "exposure_surfaces": [ "loadbalancer_service" ], "host_family_hint": null, "interface_artifacts": [ "knowledge/repos/metrics-integration/interfaces/global-cmd-metrics-integration.json", "knowledge/repos/metrics-integration/interfaces/pipeline-cmd-metrics-collector.json", "knowledge/repos/metrics-integration/interfaces/pipeline-cmd-prometheus.json", "knowledge/repos/metrics-integration/interfaces/regional-cmd-regional-integration-server.json" ], "interface_summaries": [ { "file": "knowledge/repos/metrics-integration/interfaces/global-cmd-metrics-integration.json", "binary": "metrics-integration", "type": null, "service_count": 3, "sample_services": [ { "name": "GlobalIntegrationGateway", "type": "http", "method_count": 3 }, { "name": "GlobalIntegrationGRPC", "type": "grpc", "method_count": 3 }, { "name": "EventBusConsumer", "type": "worker", "method_count": 1 } ] }, { "file": "knowledge/repos/metrics-integration/interfaces/pipeline-cmd-metrics-collector.json", "binary": "metrics-collector", "type": null, "service_count": 2, "sample_services": [ { "name": "MetricsService", "type": "http", "method_count": 1 }, { "name": "TelemetryPipeline", "type": "worker", "method_count": 1 } ] }, { "file": "knowledge/repos/metrics-integration/interfaces/pipeline-cmd-prometheus.json", "binary": "prometheus", "type": null, "service_count": 3, "sample_services": [ { "name": "HealthService", "type": "http", "method_count": 2 }, { "name": "ClusterMetricsAPI", "type": "http", "method_count": 1 }, { "name": "GinMetrics", "type": "http", "method_count": 1 } ] }, { "file": "knowledge/repos/metrics-integration/interfaces/regional-cmd-regional-integration-server.json", "binary": "regional-integration-server", "type": null, "service_count": 2, "sample_services": [ { "name": "RegionalIntegrationGateway", "type": "http", "method_count": 3 }, { "name": "RegionalIntegrationGRPC", "type": "grpc", "method_count": 2 } ] } ], "example_evidence": [ { "source_file": "dev/metrics-integration/metrics-integration-regional-loadbalancer/envs/dev-aws-us-east-1/service.yaml", "reachability": "internet_facing_lb", "host": null, "path": null, "backend_service": "metrics-integration-regional-service-lb" }, { "source_file": "dev/metrics-integration/metrics-integration-regional-loadbalancer/envs/dev-aws-us-west-2/service.yaml", "reachability": "internet_facing_lb", "host": null, "path": null, "backend_service": "metrics-integration-regional-service-lb" }, { "source_file": "metrics-integration/metrics-integration-regional-loadbalancer/envs/prod-aws-ap-northeast-1/service.yaml", "reachability": "internet_facing_lb", "host": null, "path": null, "backend_service": "metrics-integration-regional-service-lb" }, { "source_file": "metrics-integration/metrics-integration-regional-loadbalancer/envs/prod-aws-ap-northeast-2/service.yaml", "reachability": "internet_facing_lb", "host": null, "path": null, "backend_service": "metrics-integration-regional-service-lb" }, { "source_file": "metrics-integration/metrics-integration-regional-loadbalancer/envs/prod-aws-ap-south-1/service.yaml", "reachability": "internet_facing_lb", "host": null, "path": null, "backend_service": "metrics-integration-regional-service-lb" }, { "source_file": "metrics-integration/metrics-integration-regional-loadbalancer/envs/prod-aws-ap-southeast-1/service.yaml", "reachability": "internet_facing_lb", "host": null, "path": null, "backend_service": "metrics-integration-regional-service-lb" } ], "record_count": 12 }, { "service_id": "public-service:o11y-svc", "deployment_object": "o11y-svc", "source_owner": "tidbcloud/observability", "exposure_status": "confirmed_external_entrypoint", "public_signal": "high", "audience": "tenant_observability", "host_patterns": [ "o11y-ds.us-west-2.nightly.shared.aws.tidbcloud.com", "o11y-ds.us-west-2.prod.aws.tidbcloud.com", "o11y-ds.us-west-2.staging.shared.aws.tidbcloud.com", "o11y-gs.us-west-2.nightly.shared.aws.tidbcloud.com", "o11y-gs.us-west-2.prod.aws.tidbcloud.com", "o11y-gs.us-west-2.staging.shared.aws.tidbcloud.com", "serverless.dev.tidbapi.com", "serverless.staging.tidbapi.com", "serverless.tidbapi.com", "us-west-2.nightly.shared.aws.tidbcloud.com", "us-west-2.prod.aws.tidbcloud.com", "us-west-2.staging.shared.aws.tidbcloud.com" ], "path_prefixes": [ "/[0-9a-fA-F-]{36}/(metrics|diagnosis)/", "/api/v1/external/", "/external/metrics/tidbcloud/tenant/[0-9A-Za-z]+/project/[0-9A-Za-z]+/application/drhouse", "/v1beta1/clusters/[0-9A-Za-z]+/monitoringPipelines" ], "backend_services": [ "o11y-global-portal-for-serverless", "o11y-prod-globalserver-svc" ], "exposure_surfaces": [ "ingress" ], "host_family_hint": null, "interface_artifacts": [ "knowledge/repos/observability/interfaces/agent-control-server.json", "knowledge/repos/observability/interfaces/cmd-diagnosis-compute.json", "knowledge/repos/observability/interfaces/cmd-diagnosis-query.json", "knowledge/repos/observability/interfaces/cmd-mockmetricsserver.json", "knowledge/repos/observability/interfaces/data-collector-cmd-collector.json", "knowledge/repos/observability/interfaces/data-collector-cmd-processor.json", "knowledge/repos/observability/interfaces/vmbackupmanager.json" ], "interface_summaries": [ { "file": "knowledge/repos/observability/interfaces/agent-control-server.json", "binary": "agent-control-server", "type": null, "service_count": 0, "sample_services": [] }, { "file": "knowledge/repos/observability/interfaces/cmd-diagnosis-compute.json", "binary": "diagnosis-compute", "type": null, "service_count": 0, "sample_services": [] }, { "file": "knowledge/repos/observability/interfaces/cmd-diagnosis-query.json", "binary": "diagnosis-query", "type": null, "service_count": 0, "sample_services": [] }, { "file": "knowledge/repos/observability/interfaces/cmd-mockmetricsserver.json", "binary": "mockmetricsserver", "type": null, "service_count": 0, "sample_services": [] }, { "file": "knowledge/repos/observability/interfaces/data-collector-cmd-collector.json", "binary": "collector", "type": null, "service_count": 0, "sample_services": [] }, { "file": "knowledge/repos/observability/interfaces/data-collector-cmd-processor.json", "binary": "processor", "type": null, "service_count": 0, "sample_services": [] }, { "file": "knowledge/repos/observability/interfaces/vmbackupmanager.json", "binary": "vmbackupmanager", "type": null, "service_count": 0, "sample_services": [] } ], "example_evidence": [ { "source_file": "o11y-svc/envs/nightly/ingress.yaml", "reachability": "public_dns", "host": "o11y-ds.us-west-2.nightly.shared.aws.tidbcloud.com", "path": "/[0-9a-fA-F-]{36}/(metrics|diagnosis)/", "backend_service": "o11y-prod-globalserver-svc" }, { "source_file": "o11y-svc/envs/nightly/ingress.yaml", "reachability": "public_dns", "host": "o11y-gs.us-west-2.nightly.shared.aws.tidbcloud.com", "path": "/api/v1/external/", "backend_service": "o11y-prod-globalserver-svc" }, { "source_file": "o11y-svc/envs/nightly/ingress.yaml", "reachability": "public_dns", "host": "serverless.dev.tidbapi.com", "path": "/v1beta1/clusters/[0-9A-Za-z]+/monitoringPipelines", "backend_service": "o11y-global-portal-for-serverless" }, { "source_file": "o11y-svc/envs/nightly/ingress.yaml", "reachability": "public_dns", "host": "us-west-2.nightly.shared.aws.tidbcloud.com", "path": "/external/metrics/tidbcloud/tenant/[0-9A-Za-z]+/project/[0-9A-Za-z]+/application/drhouse", "backend_service": "o11y-prod-globalserver-svc" }, { "source_file": "o11y-svc/envs/prod/ingress.yaml", "reachability": "public_dns", "host": "o11y-ds.us-west-2.prod.aws.tidbcloud.com", "path": "/[0-9a-fA-F-]{36}/(metrics|diagnosis)/", "backend_service": "o11y-prod-globalserver-svc" }, { "source_file": "o11y-svc/envs/prod/ingress.yaml", "reachability": "public_dns", "host": "o11y-gs.us-west-2.prod.aws.tidbcloud.com", "path": "/api/v1/external/", "backend_service": "o11y-prod-globalserver-svc" } ], "record_count": 12 }, { "service_id": "public-service:dedicated-cluster-ng-service", "deployment_object": "dedicated-cluster-ng-service", "source_owner": "tidbcloud/cluster-service-ng", "exposure_status": "shared_gateway_exposure", "public_signal": "medium", "audience": "shared_gateway_api", "host_patterns": [], "path_prefixes": [ "/api/premium", "/cluster-ng-server", "/dataplane" ], "backend_services": [ "cluster-ng-server" ], "exposure_surfaces": [ "httproute" ], "host_family_hint": "regional-api.*.tidbcloud.com via shared Kong gateway", "interface_artifacts": [ "knowledge/repos/cluster-service-ng/interfaces/cmd-cluster_ng_server.json" ], "interface_summaries": [ { "file": "knowledge/repos/cluster-service-ng/interfaces/cmd-cluster_ng_server.json", "binary": "cluster_ng_server", "type": null, "service_count": 7, "sample_services": [ { "name": "SharedPoolService", "type": null, "method_count": 31 }, { "name": "NodeInstanceGroupService", "type": null, "method_count": 9 }, { "name": "TiDBClusterService", "type": null, "method_count": 27 }, { "name": "RuConfigService", "type": null, "method_count": 2 }, { "name": "RestoreService", "type": null, "method_count": 1 }, { "name": "ExportService", "type": null, "method_count": 4 } ] } ], "example_evidence": [ { "source_file": "dedicated-cluster-ng-service/cluster-ng-server/base/httproute.yaml", "reachability": "gateway_routed_unknown_host", "host": null, "path": "/api/premium", "backend_service": "cluster-ng-server" }, { "source_file": "dedicated-cluster-ng-service/cluster-ng-server/base/httproute.yaml", "reachability": "gateway_routed_unknown_host", "host": null, "path": "/dataplane", "backend_service": "cluster-ng-server" }, { "source_file": "dedicated-cluster-ng-service/cluster-ng-server/base/httproute.yaml", "reachability": "gateway_routed_unknown_host", "host": null, "path": "/cluster-ng-server", "backend_service": "cluster-ng-server" }, { "source_file": "dev/dedicated-cluster-ng-service/cluster-ng-server/base/httproute.yaml", "reachability": "gateway_routed_unknown_host", "host": null, "path": "/api/premium", "backend_service": "cluster-ng-server" }, { "source_file": "dev/dedicated-cluster-ng-service/cluster-ng-server/base/httproute.yaml", "reachability": "gateway_routed_unknown_host", "host": null, "path": "/dataplane", "backend_service": "cluster-ng-server" }, { "source_file": "dev/dedicated-cluster-ng-service/cluster-ng-server/base/httproute.yaml", "reachability": "gateway_routed_unknown_host", "host": null, "path": "/cluster-ng-server", "backend_service": "cluster-ng-server" } ], "record_count": 9 }, { "service_id": "public-service:dataservice-regional-svc", "deployment_object": "dataservice-regional-svc", "source_owner": "tidbcloud/dataservices", "exposure_status": "confirmed_external_entrypoint", "public_signal": "high", "audience": "tenant_data_api", "host_patterns": [ "regionalsvc01.ap-southeast-1.dev.shared.alicloud.tidbcloud.com", "regionalsvc01.ap-southeast-1.prod.alicloud.tidbcloud.com", "regionalsvc01.ap-southeast-5.prod.alicloud.tidbcloud.com", "regionalsvc01.cn-hongkong.prod.alicloud.tidbcloud.com", "regionalsvc01.na-south-1.prod.alicloud.tidbcloud.com" ], "path_prefixes": [ "/dataservice(/|$)(.*)" ], "backend_services": [ "dataservice-dataapp-gateway-service" ], "exposure_surfaces": [ "ingress" ], "host_family_hint": null, "interface_artifacts": [ "knowledge/repos/dataservices/interfaces/cmd-adminapi.json", "knowledge/repos/dataservices/interfaces/cmd-central-worker.json", "knowledge/repos/dataservices/interfaces/cmd-central.json", "knowledge/repos/dataservices/interfaces/cmd-dataapi-control.json", "knowledge/repos/dataservices/interfaces/cmd-dataapi-executor.json", "knowledge/repos/dataservices/interfaces/cmd-dataapi-gateway.json", "knowledge/repos/dataservices/interfaces/cmd-dataapi.json", "knowledge/repos/dataservices/interfaces/cmd-regioncentral.json", "knowledge/repos/dataservices/interfaces/cmd-tools.json" ], "interface_summaries": [ { "file": "knowledge/repos/dataservices/interfaces/cmd-adminapi.json", "binary": "adminapi", "type": null, "service_count": 8, "sample_services": [ { "name": "AdminAPILifecycle", "type": null, "method_count": 7 }, { "name": "AdminAPIHTTP", "type": "http", "method_count": 2 }, { "name": "DataAppsService", "type": "grpc", "method_count": 9 }, { "name": "DataSourcesService", "type": "grpc", "method_count": 4 }, { "name": "EndpointsService", "type": "grpc", "method_count": 6 }, { "name": "DeploymentsService", "type": "grpc", "method_count": 3 } ] }, { "file": "knowledge/repos/dataservices/interfaces/cmd-central-worker.json", "binary": "central_worker", "type": null, "service_count": 2, "sample_services": [ { "name": "CentralWorkerLifecycle", "type": null, "method_count": 7 }, { "name": "CentralWorkerHTTP", "type": "http", "method_count": 1 } ] }, { "file": "knowledge/repos/dataservices/interfaces/cmd-central.json", "binary": "central", "type": null, "service_count": 2, "sample_services": [ { "name": "CentralLifecycle", "type": null, "method_count": 10 }, { "name": "CentralHTTP", "type": "http", "method_count": 105 } ] }, { "file": "knowledge/repos/dataservices/interfaces/cmd-dataapi-control.json", "binary": "dataapi_control", "type": null, "service_count": 2, "sample_services": [ { "name": "DataAPIControlLifecycle", "type": null, "method_count": 7 }, { "name": "DataAPIControlHTTP", "type": "http", "method_count": 9 } ] }, { "file": "knowledge/repos/dataservices/interfaces/cmd-dataapi-executor.json", "binary": "dataapi_executor", "type": null, "service_count": 3, "sample_services": [ { "name": "DataAPIExecutorLifecycle", "type": null, "method_count": 7 }, { "name": "DataAPIExecutorHTTP", "type": "http", "method_count": 1 }, { "name": "DataAPIExecutorService", "type": "grpc", "method_count": 5 } ] }, { "file": "knowledge/repos/dataservices/interfaces/cmd-dataapi-gateway.json", "binary": "dataapi_gateway", "type": null, "service_count": 3, "sample_services": [ { "name": "DataAPIGatewayLifecycle", "type": null, "method_count": 11 }, { "name": "DataAPIGatewayHTTP", "type": "http", "method_count": 19 }, { "name": "DataAPIGatewayService", "type": "grpc", "method_count": 7 } ] }, { "file": "knowledge/repos/dataservices/interfaces/cmd-dataapi.json", "binary": "dataapi", "type": null, "service_count": 3, "sample_services": [ { "name": "DataAPILifecycle", "type": null, "method_count": 7 }, { "name": "DataAPIHTTP", "type": "http", "method_count": 1 }, { "name": "DataAPIService", "type": "grpc", "method_count": 18 } ] }, { "file": "knowledge/repos/dataservices/interfaces/cmd-regioncentral.json", "binary": "regioncentral", "type": null, "service_count": 3, "sample_services": [ { "name": "RegionCentralLifecycle", "type": null, "method_count": 5 }, { "name": "RegionCentralHTTP", "type": "http", "method_count": 1 }, { "name": "RegionCentralService", "type": "grpc", "method_count": 1 } ] } ], "example_evidence": [ { "source_file": "dataservice-regional-svc/alicloud-envs/prod-ali-ap-southeast-1/ingress.yaml", "reachability": "public_dns", "host": "regionalsvc01.ap-southeast-1.prod.alicloud.tidbcloud.com", "path": "/dataservice(/|$)(.*)", "backend_service": "dataservice-dataapp-gateway-service" }, { "source_file": "dataservice-regional-svc/alicloud-envs/prod-ali-ap-southeast-5/ingress.yaml", "reachability": "public_dns", "host": "regionalsvc01.ap-southeast-5.prod.alicloud.tidbcloud.com", "path": "/dataservice(/|$)(.*)", "backend_service": "dataservice-dataapp-gateway-service" }, { "source_file": "dataservice-regional-svc/alicloud-envs/prod-ali-cn-hongkong/ingress.yaml", "reachability": "public_dns", "host": "regionalsvc01.cn-hongkong.prod.alicloud.tidbcloud.com", "path": "/dataservice(/|$)(.*)", "backend_service": "dataservice-dataapp-gateway-service" }, { "source_file": "dataservice-regional-svc/alicloud-envs/prod-ali-na-south-1/ingress.yaml", "reachability": "public_dns", "host": "regionalsvc01.na-south-1.prod.alicloud.tidbcloud.com", "path": "/dataservice(/|$)(.*)", "backend_service": "dataservice-dataapp-gateway-service" }, { "source_file": "dev/dataservice-regional-svc/envs/dev-ali-ap-southeast-1/ingress.yaml", "reachability": "public_dns", "host": "regionalsvc01.ap-southeast-1.dev.shared.alicloud.tidbcloud.com", "path": "/dataservice(/|$)(.*)", "backend_service": "dataservice-dataapp-gateway-service" } ], "record_count": 5 }, { "service_id": "public-service:serverless-ops-service", "deployment_object": "serverless-ops-service", "source_owner": "tidbcloud/aws-shared-provider", "exposure_status": "confirmed_external_entrypoint", "public_signal": "high", "audience": "operator_api", "host_patterns": [ "regionalsvc01.ap-southeast-1.dev.shared.alicloud.tidbcloud.com", "regionalsvc01.us-east-1.dev.shared.aws.tidbcloud.com", "regionalsvc01.us-east-1.staging.shared.aws.tidbcloud.com", "regionalsvc02.us-east-1.dev.qa.shared.aws.tidbcloud.com" ], "path_prefixes": [ "/ops" ], "backend_services": [ "ops-service-svc" ], "exposure_surfaces": [ "ingress" ], "host_family_hint": null, "interface_artifacts": [ "knowledge/repos/aws-shared-provider/interfaces/cmd-audit-log.json", "knowledge/repos/aws-shared-provider/interfaces/cmd-csi-node-taint.json", "knowledge/repos/aws-shared-provider/interfaces/cmd-gateway-controller.json", "knowledge/repos/aws-shared-provider/interfaces/cmd-manager.json", "knowledge/repos/aws-shared-provider/interfaces/cmd-meta-server.json", "knowledge/repos/aws-shared-provider/interfaces/cmd-ops-service.json", "knowledge/repos/aws-shared-provider/interfaces/cmd-tidb-gateway.json", "knowledge/repos/aws-shared-provider/interfaces/cmd-tidb-http-gateway.json", "knowledge/repos/aws-shared-provider/interfaces/cmd-tidb-worker.json", "knowledge/repos/aws-shared-provider/interfaces/cmd-vpa-agent.json" ], "interface_summaries": [ { "file": "knowledge/repos/aws-shared-provider/interfaces/cmd-audit-log.json", "binary": "audit-log", "type": null, "service_count": 5, "sample_services": [ { "name": "SchedulerHealthService", "type": "http", "method_count": 0 }, { "name": "SchedulerMetricsService", "type": "http", "method_count": 0 }, { "name": "SchedulerCronJobs", "type": "cron", "method_count": 0 }, { "name": "WorkerJobController", "type": "kubernetes_controller", "method_count": 0 }, { "name": "Worker", "type": "cli", "method_count": 0 } ] }, { "file": "knowledge/repos/aws-shared-provider/interfaces/cmd-csi-node-taint.json", "binary": "csi-node-taint", "type": null, "service_count": 2, "sample_services": [ { "name": "HealthService", "type": "http", "method_count": 0 }, { "name": "CSINodeReconciler", "type": "kubernetes_controller", "method_count": 0 } ] }, { "file": "knowledge/repos/aws-shared-provider/interfaces/cmd-gateway-controller.json", "binary": "gateway-controller", "type": null, "service_count": 4, "sample_services": [ { "name": "HealthService", "type": "http", "method_count": 0 }, { "name": "MetricsService", "type": "http", "method_count": 0 }, { "name": "GatewayReconciler", "type": "kubernetes_controller", "method_count": 0 }, { "name": "PodAnnotationReconciler", "type": "kubernetes_controller", "method_count": 0 } ] }, { "file": "knowledge/repos/aws-shared-provider/interfaces/cmd-manager.json", "binary": "manager", "type": "mixed_service", "service_count": 31, "sample_services": [ { "name": "ManagerLifecycle", "type": "lifecycle", "method_count": 15 }, { "name": "MetricsService", "type": "http", "method_count": 1 }, { "name": "WebhookService", "type": "webhook", "method_count": 1 }, { "name": "ManagerServer", "type": "mixed_service", "method_count": 24 }, { "name": "RedisConsumer", "type": "background_task", "method_count": 1 }, { "name": "TidbManager", "type": "background_task", "method_count": 1 } ] }, { "file": "knowledge/repos/aws-shared-provider/interfaces/cmd-meta-server.json", "binary": "meta-server", "type": "mixed_service", "service_count": 3, "sample_services": [ { "name": "MetaServerLifecycle", "type": "lifecycle", "method_count": 5 }, { "name": "MetaAPI", "type": "http", "method_count": 6 }, { "name": "MetaStoreWatcher", "type": "worker", "method_count": 2 } ] }, { "file": "knowledge/repos/aws-shared-provider/interfaces/cmd-ops-service.json", "binary": "ops-service", "type": "mixed_service", "service_count": 3, "sample_services": [ { "name": "OpsServiceLifecycle", "type": "lifecycle", "method_count": 7 }, { "name": "OpsAPI", "type": "http", "method_count": 7 }, { "name": "ImageReportScheduler", "type": "worker", "method_count": 1 } ] }, { "file": "knowledge/repos/aws-shared-provider/interfaces/cmd-tidb-gateway.json", "binary": "tidb-gateway", "type": null, "service_count": 3, "sample_services": [ { "name": "ProbeService", "type": "http", "method_count": 0 }, { "name": "MetricsService", "type": "http", "method_count": 0 }, { "name": "SQLProxy", "type": "tcp", "method_count": 0 } ] }, { "file": "knowledge/repos/aws-shared-provider/interfaces/cmd-tidb-http-gateway.json", "binary": "tidb-http-gateway", "type": null, "service_count": 3, "sample_services": [ { "name": "HealthService", "type": "http", "method_count": 0 }, { "name": "MetricsService", "type": "http", "method_count": 0 }, { "name": "SQLService", "type": "http", "method_count": 0 } ] } ], "example_evidence": [ { "source_file": "dev/serverless-ops-service/envs/dev-ali-ap-southeast-1-f01/ingress.yaml", "reachability": "public_dns", "host": "regionalsvc01.ap-southeast-1.dev.shared.alicloud.tidbcloud.com", "path": "/ops", "backend_service": "ops-service-svc" }, { "source_file": "dev/serverless-ops-service/envs/dev-us-east-1-f01/ingress.yaml", "reachability": "public_dns", "host": "regionalsvc01.us-east-1.dev.shared.aws.tidbcloud.com", "path": "/ops", "backend_service": "ops-service-svc" }, { "source_file": "dev/serverless-ops-service/envs/dev-us-east-1-f02/ingress.yaml", "reachability": "public_dns", "host": "regionalsvc02.us-east-1.dev.qa.shared.aws.tidbcloud.com", "path": "/ops", "backend_service": "ops-service-svc" }, { "source_file": "serverless-ops-service/envs/staging-us-east-1-f01/ingress.yaml", "reachability": "public_dns", "host": "regionalsvc01.us-east-1.staging.shared.aws.tidbcloud.com", "path": "/ops", "backend_service": "ops-service-svc" } ], "record_count": 4 }, { "service_id": "public-service:config-center-regional", "deployment_object": "config-center-regional", "source_owner": "tidbcloud/config-center", "exposure_status": "shared_gateway_exposure", "public_signal": "medium", "audience": "shared_gateway_api", "host_patterns": [], "path_prefixes": [ "/config-center" ], "backend_services": [ "config-center" ], "exposure_surfaces": [ "httproute" ], "host_family_hint": "regional-api.*.tidbcloud.com via shared Kong gateway", "interface_artifacts": [ "knowledge/repos/config-center/interfaces/cmd-server.json" ], "interface_summaries": [ { "file": "knowledge/repos/config-center/interfaces/cmd-server.json", "binary": "server", "type": null, "service_count": 1, "sample_services": [ { "name": "ConfigCenterService", "type": null, "method_count": 59 } ] } ], "example_evidence": [ { "source_file": "config-center-regional/base/httproute.yaml", "reachability": "gateway_routed_unknown_host", "host": null, "path": "/config-center", "backend_service": "config-center" }, { "source_file": "dev/config-center-regional/base/httproute.yaml", "reachability": "gateway_routed_unknown_host", "host": null, "path": "/config-center", "backend_service": "config-center" }, { "source_file": "staging/config-center-regional/base/httproute.yaml", "reachability": "gateway_routed_unknown_host", "host": null, "path": "/config-center", "backend_service": "config-center" } ], "record_count": 3 }, { "service_id": "public-service:dedicated-cluster-service", "deployment_object": "dedicated-cluster-service", "source_owner": "tidbcloud/infra-provider (cluster-server) + tiworkload agent bundle", "exposure_status": "shared_gateway_exposure", "public_signal": "medium", "audience": "shared_gateway_api", "host_patterns": [], "path_prefixes": [ "/cluster-server", "/tiworkload" ], "backend_services": [ "cluster-control-service", "tiworkload-agent" ], "exposure_surfaces": [ "httproute" ], "host_family_hint": "regional-api.*.tidbcloud.com via shared Kong gateway", "interface_artifacts": [ "knowledge/repos/infra-provider/interfaces/cluster-server.json" ], "interface_summaries": [ { "file": "knowledge/repos/infra-provider/interfaces/cluster-server.json", "binary": "cluster-server", "type": null, "service_count": 2, "sample_services": [ { "name": "ClusterServerGateway", "type": "http", "method_count": 2 }, { "name": "ClusterServerGRPC", "type": "grpc", "method_count": 7 } ] } ], "example_evidence": [ { "source_file": "dedicated-cluster-service/cluster-server/base/httproute.yaml", "reachability": "gateway_routed_unknown_host", "host": null, "path": "/cluster-server", "backend_service": "cluster-control-service" }, { "source_file": "dedicated-cluster-service/tiworkload/envs/dev-eastus/tiworkload-agent-httproute.yaml", "reachability": "gateway_routed_unknown_host", "host": null, "path": "/tiworkload", "backend_service": "tiworkload-agent" }, { "source_file": "dedicated-cluster-service/tiworkload/envs/staging-eastus2/tiworkload-agent-httproute.yaml", "reachability": "gateway_routed_unknown_host", "host": null, "path": "/tiworkload", "backend_service": "tiworkload-agent" } ], "record_count": 3 }, { "service_id": "public-service:devops-service", "deployment_object": "devops-service", "source_owner": "tidbcloud/devops", "exposure_status": "confirmed_external_entrypoint", "public_signal": "high", "audience": "preview_web", "host_patterns": [ "investibook.tidbcloud.com" ], "path_prefixes": [ "/", "/api", "/health" ], "backend_services": [ "backend", "frontend" ], "exposure_surfaces": [ "ingress" ], "host_family_hint": null, "interface_artifacts": [ "knowledge/repos/devops/interfaces/cmd-devops-server.json", "knowledge/repos/devops/interfaces/cmd-jump-pod-agent.json", "knowledge/repos/devops/interfaces/cmd-migrate-proxy.json" ], "interface_summaries": [ { "file": "knowledge/repos/devops/interfaces/cmd-devops-server.json", "binary": "devops-server", "type": null, "service_count": 34, "sample_services": [ { "name": "DevopsServerLifecycle", "type": null, "method_count": 10 }, { "name": "DevopsAPIRuntimeHTTP", "type": null, "method_count": 3 }, { "name": "DevopsMCPRuntimeHTTP", "type": null, "method_count": 2 }, { "name": "AuthService", "type": "grpc", "method_count": 3 }, { "name": "ApplicationControllerHTTP", "type": "http", "method_count": 5 }, { "name": "ApprovalControllerHTTP", "type": "http", "method_count": 6 } ] }, { "file": "knowledge/repos/devops/interfaces/cmd-jump-pod-agent.json", "binary": "jump-pod-agent", "type": null, "service_count": 3, "sample_services": [ { "name": "JumpPodAgentLifecycle", "type": null, "method_count": 5 }, { "name": "JumpPodAgentWatcher", "type": null, "method_count": 1 }, { "name": "JumpPodAgentHTTP", "type": null, "method_count": 4 } ] }, { "file": "knowledge/repos/devops/interfaces/cmd-migrate-proxy.json", "binary": "migrate-proxy", "type": null, "service_count": 2, "sample_services": [ { "name": "MigrateProxyLifecycle", "type": null, "method_count": 3 }, { "name": "MigrateProxyHTTP", "type": null, "method_count": 1 } ] } ], "example_evidence": [ { "source_file": "devops-service/investibook/envs/preview/ingress.yaml", "reachability": "public_dns", "host": "investibook.tidbcloud.com", "path": "/api", "backend_service": "backend" }, { "source_file": "devops-service/investibook/envs/preview/ingress.yaml", "reachability": "public_dns", "host": "investibook.tidbcloud.com", "path": "/health", "backend_service": "backend" }, { "source_file": "devops-service/investibook/envs/preview/ingress.yaml", "reachability": "public_dns", "host": "investibook.tidbcloud.com", "path": "/", "backend_service": "frontend" } ], "record_count": 3 }, { "service_id": "public-service:dedicated-infra-apiserver", "deployment_object": "dedicated-infra-apiserver", "source_owner": "infra-cd apiserver stack + third-party kubernetes control-plane bundle", "exposure_status": "confirmed_external_entrypoint", "public_signal": "medium", "audience": "unknown", "host_patterns": [], "path_prefixes": [], "backend_services": [ "dedicated-api-server-lb" ], "exposure_surfaces": [ "loadbalancer_service" ], "host_family_hint": null, "interface_artifacts": [], "interface_summaries": [], "example_evidence": [ { "source_file": "dedicated-infra-apiserver/base/service.yaml", "reachability": "internet_facing_lb", "host": null, "path": null, "backend_service": "dedicated-api-server-lb" } ], "record_count": 1 }, { "service_id": "public-service:dedicated-ticdc-service", "deployment_object": "dedicated-ticdc-service", "source_owner": "tidbcloud/dataflow-service", "exposure_status": "shared_gateway_exposure", "public_signal": "medium", "audience": "shared_gateway_api", "host_patterns": [], "path_prefixes": [ "/ticdc-service" ], "backend_services": [ "ticdc-service-server" ], "exposure_surfaces": [ "httproute" ], "host_family_hint": "regional-api.*.tidbcloud.com via shared Kong gateway", "interface_artifacts": [ "knowledge/repos/dataflow-service/interfaces/cmd-dataflow-ng.json" ], "interface_summaries": [ { "file": "knowledge/repos/dataflow-service/interfaces/cmd-dataflow-ng.json", "binary": "dataflow-ng", "type": null, "service_count": 4, "sample_services": [ { "name": "ChangefeedService", "type": null, "method_count": 15 }, { "name": "ChangefeedSpecService", "type": null, "method_count": 1 }, { "name": "OpsInternalService", "type": null, "method_count": 12 }, { "name": "SinkEndpointService", "type": null, "method_count": 8 } ] } ], "example_evidence": [ { "source_file": "dedicated-ticdc-service/ticdc-service/base/httproute.yaml", "reachability": "gateway_routed_unknown_host", "host": null, "path": "/ticdc-service", "backend_service": "ticdc-service-server" } ], "record_count": 1 }, { "service_id": "public-service:tcidm", "deployment_object": "tcidm", "source_owner": "tidbcloud/tcidm", "exposure_status": "shared_gateway_exposure", "public_signal": "medium", "audience": "shared_gateway_api", "host_patterns": [], "path_prefixes": [ "/api/v1/tcidm" ], "backend_services": [ "regional-tcidm-service-service" ], "exposure_surfaces": [ "httproute" ], "host_family_hint": "regional-api.*.tidbcloud.com via shared Kong gateway", "interface_artifacts": [ "knowledge/repos/tcidm/interfaces/cmd-regional_tcidm_service.json" ], "interface_summaries": [ { "file": "knowledge/repos/tcidm/interfaces/cmd-regional_tcidm_service.json", "binary": "regional_tcidm_service", "type": null, "service_count": 7, "sample_services": [ { "name": "PrivateLinkEndpointService", "type": "http_api", "method_count": 3 }, { "name": "DMJobService", "type": "http_api", "method_count": 4 }, { "name": "ImportService", "type": "http_api", "method_count": 7 }, { "name": "UtilService", "type": "http_api", "method_count": 7 }, { "name": "ProxyService", "type": "http_api", "method_count": 2 }, { "name": "HealthService", "type": "http_api", "method_count": 1 } ] } ], "example_evidence": [ { "source_file": "tcidm/regional-tcidm-service/base/httproute.yaml", "reachability": "gateway_routed_unknown_host", "host": null, "path": "/api/v1/tcidm", "backend_service": "regional-tcidm-service-service" } ], "record_count": 1 } ], "unresolved_candidates": [ { "service_id": "public-candidate:account-svc", "deployment_object": "account-svc", "source_owner": "tidbcloud/account", "status": "deployment_exposed_but_host_unresolved", "reason": "nodeport_or_internal_service_without_resolved_external_host", "backend_services": [ "account-acl-grpc-v2", "account-admin-http", "account-admin-http-v2", "account-central-http", "account-central-http-v2", "account-openapi-http", "account-openapi-http-v2", "account-provider-grpc", "account-provider-grpc-v2", "account-provider-http" ], "host_family_hint": null, "interface_artifacts": [ "knowledge/repos/account/interfaces/admin-cmd-server.json", "knowledge/repos/account/interfaces/central-cmd-acl.json", "knowledge/repos/account/interfaces/central-cmd-central.json", "knowledge/repos/account/interfaces/central-cmd-openapi.json", "knowledge/repos/account/interfaces/central-cmd-provider.json", "knowledge/repos/account/interfaces/central-cmd-worker.json" ], "interface_summaries": [ { "file": "knowledge/repos/account/interfaces/admin-cmd-server.json", "binary": "admin-server", "type": null, "service_count": 3, "sample_services": [ { "name": "AdminServerLifecycle", "type": null, "method_count": 12 }, { "name": "AdminPublicHTTP", "type": "http", "method_count": 3 }, { "name": "AdminProtectedHTTP", "type": "http", "method_count": 64 } ] }, { "file": "knowledge/repos/account/interfaces/central-cmd-acl.json", "binary": "acl", "type": null, "service_count": 1, "sample_services": [ { "name": "AccessService", "type": null, "method_count": 6 } ] }, { "file": "knowledge/repos/account/interfaces/central-cmd-central.json", "binary": "central", "type": null, "service_count": 12, "sample_services": [ { "name": "AuthService", "type": null, "method_count": 7 }, { "name": "AuditLogService", "type": null, "method_count": 3 }, { "name": "TenantService", "type": null, "method_count": 37 }, { "name": "OpenAPIKeyService", "type": null, "method_count": 11 }, { "name": "MetricsService", "type": null, "method_count": 1 }, { "name": "ApiKeyService", "type": null, "method_count": 1 } ] }, { "file": "knowledge/repos/account/interfaces/central-cmd-openapi.json", "binary": "openapi", "type": "http_rest_api", "service_count": 16, "sample_services": [ { "name": "HealthCheck", "type": "http", "method_count": 1 }, { "name": "ProjectService", "type": "grpc", "method_count": 2 }, { "name": "ProjectAPI", "type": "http", "method_count": 2 }, { "name": "UserAPI", "type": "http", "method_count": 1 }, { "name": "ApiKeyAPI", "type": "http", "method_count": 7 }, { "name": "SqlUserAPI", "type": "http", "method_count": 5 } ] }, { "file": "knowledge/repos/account/interfaces/central-cmd-provider.json", "binary": "provider", "type": null, "service_count": 2, "sample_services": [ { "name": "AccountAPIService", "type": null, "method_count": 69 }, { "name": "InnerHTTP", "type": null, "method_count": 5 } ] }, { "file": "knowledge/repos/account/interfaces/central-cmd-worker.json", "binary": "worker", "type": null, "service_count": 7, "sample_services": [ { "name": "HealthService", "type": "http", "method_count": 3 }, { "name": "JobQueueHandler", "type": "sqs_consumer", "method_count": 4 }, { "name": "ClusterEventHandler", "type": "eventbus_consumer", "method_count": 5 }, { "name": "OrgEventHandler", "type": "eventbus_consumer", "method_count": 1 }, { "name": "DataAppBindClusterEventHandler", "type": "eventbus_consumer", "method_count": 4 }, { "name": "RedisSubscriber", "type": "redis_pubsub", "method_count": 1 } ] } ], "example_evidence": [ { "source_file": "account-svc/base/account-admin-deployment.yaml", "reachability": "unknown", "backend_service": "account-admin-http" }, { "source_file": "account-svc/base/account-central-deployment.yaml", "reachability": "unknown", "backend_service": "account-central-http" }, { "source_file": "account-svc/base/account-openapi-deployment.yaml", "reachability": "unknown", "backend_service": "account-openapi-http" }, { "source_file": "account-svc/base/account-provider-deployment.yaml", "reachability": "unknown", "backend_service": "account-provider-http" }, { "source_file": "dev/account-svc/base/account-acl-deployment.yaml", "reachability": "unknown", "backend_service": "account-acl-grpc-v2" }, { "source_file": "dev/account-svc/base/account-admin-deployment.yaml", "reachability": "unknown", "backend_service": "account-admin-http-v2" } ] }, { "service_id": "public-candidate:authserver", "deployment_object": "authserver", "source_owner": "tidbcloud/auth-server", "status": "deployment_exposed_but_host_unresolved", "reason": "nodeport_or_internal_service_without_resolved_external_host", "backend_services": [ "authserver-central-service", "authserver-provider-service" ], "host_family_hint": null, "interface_artifacts": [ "knowledge/repos/auth-server/interfaces/cmd-auth-server.json" ], "interface_summaries": [ { "file": "knowledge/repos/auth-server/interfaces/cmd-auth-server.json", "binary": "auth-server", "type": null, "service_count": 7, "sample_services": [ { "name": "AuthServerCobra", "type": null, "method_count": 3 }, { "name": "AuthServerHTTPLifecycle", "type": null, "method_count": 7 }, { "name": "AuthServerMetricsHTTP", "type": "http", "method_count": 1 }, { "name": "AuthServerHTTP", "type": "http", "method_count": 15 }, { "name": "AuthServerGRPCLifecycle", "type": null, "method_count": 7 }, { "name": "AuthServerProviderGRPC", "type": "grpc", "method_count": 1 } ] } ], "example_evidence": [ { "source_file": "authserver/base/authserver-central-deployment.yaml", "reachability": "unknown", "backend_service": "authserver-central-service" }, { "source_file": "authserver/base/authserver-provider-deployment.yaml", "reachability": "unknown", "backend_service": "authserver-provider-service" }, { "source_file": "dev/authserver/base/authserver-central-deployment.yaml", "reachability": "unknown", "backend_service": "authserver-central-service" }, { "source_file": "dev/authserver/base/authserver-provider-deployment.yaml", "reachability": "unknown", "backend_service": "authserver-provider-service" }, { "source_file": "staging/authserver/base/authserver-central-deployment.yaml", "reachability": "unknown", "backend_service": "authserver-central-service" }, { "source_file": "staging/authserver/base/authserver-provider-deployment.yaml", "reachability": "unknown", "backend_service": "authserver-provider-service" } ] }, { "service_id": "public-candidate:tidb-mgmt-portal", "deployment_object": "tidb-mgmt-portal", "source_owner": "tidbcloud/tidb-management-service", "status": "deployment_exposed_but_host_unresolved", "reason": "nodeport_or_internal_service_without_resolved_external_host", "backend_services": [ "dedicated-tidb-mgmt-portal", "nextgen-tidb-mgmt-portal", "nextgen-tidb-mgmt-portal-ui", "serverless-tidb-mgmt-portal", "tidb-mgmt-portal-agent", "tidb-mgmt-portal-ui", "zero-tidb-mgmt-portal" ], "host_family_hint": null, "interface_artifacts": [ "knowledge/repos/tidb-management-service/interfaces/dedicated-global-service-cmd-dedicated-global-service.json", "knowledge/repos/tidb-management-service/interfaces/nextgen-global-service-cmd-nextgen-global-service.json", "knowledge/repos/tidb-management-service/interfaces/serverless-global-service-cmd-regional_proxy.json", "knowledge/repos/tidb-management-service/interfaces/serverless-global-service-cmd-serverless-global-service.json", "knowledge/repos/tidb-management-service/interfaces/tempo-proxy-cmd-tempo-proxy.json", "knowledge/repos/tidb-management-service/interfaces/tidb-mgmt-portal-cmd-tidb-mgmt-portal.json", "knowledge/repos/tidb-management-service/interfaces/tidb-mgmt-service-cmd-tidb-mgmt-service.json" ], "interface_summaries": [ { "file": "knowledge/repos/tidb-management-service/interfaces/dedicated-global-service-cmd-dedicated-global-service.json", "binary": "dedicated-global-service", "type": null, "service_count": 13, "sample_services": [ { "name": "DedicatedGlobalLifecycle", "type": null, "method_count": 6 }, { "name": "ClusterService", "type": null, "method_count": 27 }, { "name": "RegionService", "type": null, "method_count": 9 }, { "name": "SpuService", "type": null, "method_count": 12 }, { "name": "TidbNodeGroupService", "type": null, "method_count": 4 }, { "name": "VpcService", "type": null, "method_count": 12 } ] }, { "file": "knowledge/repos/tidb-management-service/interfaces/nextgen-global-service-cmd-nextgen-global-service.json", "binary": "nextgen-global-service", "type": null, "service_count": 12, "sample_services": [ { "name": "NextgenGlobalLifecycle", "type": null, "method_count": 7 }, { "name": "ClusterService", "type": null, "method_count": 19 }, { "name": "BackupService", "type": null, "method_count": 6 }, { "name": "CustomerManagedEncryptionKeyService", "type": null, "method_count": 5 }, { "name": "ExportService", "type": null, "method_count": 5 }, { "name": "DatabaseAuditLogService", "type": null, "method_count": 6 } ] }, { "file": "knowledge/repos/tidb-management-service/interfaces/serverless-global-service-cmd-regional_proxy.json", "binary": "regional_proxy", "type": null, "service_count": 2, "sample_services": [ { "name": "RegionalProxyLifecycle", "type": null, "method_count": 2 }, { "name": "RegionalServerProxyService", "type": null, "method_count": 5 } ] }, { "file": "knowledge/repos/tidb-management-service/interfaces/serverless-global-service-cmd-serverless-global-service.json", "binary": "serverless-global-service", "type": null, "service_count": 8, "sample_services": [ { "name": "ServerlessGlobalLifecycle", "type": null, "method_count": 5 }, { "name": "ServerlessService", "type": null, "method_count": 8 }, { "name": "SqlUserService", "type": null, "method_count": 9 }, { "name": "CloudProviderService", "type": null, "method_count": 2 }, { "name": "RegionService", "type": null, "method_count": 5 }, { "name": "ServerlessImportService", "type": null, "method_count": 2 } ] }, { "file": "knowledge/repos/tidb-management-service/interfaces/tempo-proxy-cmd-tempo-proxy.json", "binary": "tempo-proxy", "type": null, "service_count": 2, "sample_services": [ { "name": "TempoProxyLifecycle", "type": null, "method_count": 2 }, { "name": "CoreService", "type": null, "method_count": 52 } ] }, { "file": "knowledge/repos/tidb-management-service/interfaces/tidb-mgmt-portal-cmd-tidb-mgmt-portal.json", "binary": "tidb-mgmt-portal", "type": null, "service_count": 21, "sample_services": [ { "name": "TiDBMgmtPortalLifecycle", "type": "lifecycle", "method_count": 5 }, { "name": "ClusterService", "type": "dedicated_openapi", "method_count": 13 }, { "name": "NetworkContainerService", "type": "dedicated_openapi", "method_count": 8 }, { "name": "RegionService", "type": "dedicated_openapi", "method_count": 5 }, { "name": "MaintenanceService", "type": "dedicated_openapi", "method_count": 6 }, { "name": "TidbNodeGroupService", "type": "dedicated_openapi", "method_count": 7 } ] }, { "file": "knowledge/repos/tidb-management-service/interfaces/tidb-mgmt-service-cmd-tidb-mgmt-service.json", "binary": "tidb-mgmt-service", "type": null, "service_count": 41, "sample_services": [ { "name": "TidbMgmtLifecycle", "type": null, "method_count": 4 }, { "name": "ClusterService", "type": "dedicated_openapi", "method_count": 13 }, { "name": "NetworkContainerService", "type": "dedicated_openapi", "method_count": 8 }, { "name": "RegionService", "type": "dedicated_openapi", "method_count": 5 }, { "name": "MaintenanceService", "type": "dedicated_openapi", "method_count": 6 }, { "name": "TidbNodeGroupService", "type": "dedicated_openapi", "method_count": 7 } ] } ], "example_evidence": [ { "source_file": "tidb-mgmt-portal/base/dedicated-service.yaml", "reachability": "unknown", "backend_service": "dedicated-tidb-mgmt-portal" }, { "source_file": "tidb-mgmt-portal/base/nextgen-service.yaml", "reachability": "unknown", "backend_service": "nextgen-tidb-mgmt-portal" }, { "source_file": "tidb-mgmt-portal/base/nextgen-ui-service.yaml", "reachability": "unknown", "backend_service": "nextgen-tidb-mgmt-portal-ui" }, { "source_file": "tidb-mgmt-portal/base/serverless-service.yaml", "reachability": "unknown", "backend_service": "serverless-tidb-mgmt-portal" }, { "source_file": "tidb-mgmt-portal/base/tidb-zero-service.yaml", "reachability": "unknown", "backend_service": "tidb-mgmt-portal-agent" }, { "source_file": "tidb-mgmt-portal/base/tidb-zero-service.yaml", "reachability": "unknown", "backend_service": "zero-tidb-mgmt-portal" } ] } ] }