# Public Service Catalog

Date: 2026-03-30

## Purpose

This catalog refines the public entrypoint scan into a smaller set of public or externally reachable service candidates.

It is intended to answer which deployment objects most likely represent public services, how they are exposed, and where their interface artifacts live.

## Summary

- catalog entries: `14`
- confirmed external entrypoints: `9`
- shared-gateway exposures: `5`
- deployment-exposed unresolved candidates: `3`

Audience counts:
- `operator_api`: `1`
- `preview_web`: `1`
- `regional_api`: `3`
- `shared_gateway_api`: `5`
- `tenant_data_api`: `1`
- `tenant_observability`: `1`
- `unknown`: `2`

## Highest-Signal Services

- `dedicated-regional-server`: status `confirmed_external_entrypoint`, audience `regional_api`, source `tidbcloud/infra-provider`, sample host `af-south-1.regional-api.prod.aws.tidbcloud.com`, sample path `/`
- `nextgen-regional-control-plane`: status `confirmed_external_entrypoint`, audience `regional_api`, source `next-gen regional platform bundle`, sample host `ap-northeast-1-ng.regional-api.prod.aws.tidbcloud.com`, sample path `/dataplane-manager`
- `serverless-regional-service`: status `confirmed_external_entrypoint`, audience `regional_api`, source `tidbcloud/serverless-service`, sample host `regionalsvc01.ap-east-1.prod.aws.tidbcloud.com`, sample path `/`
- `o11y-svc`: status `confirmed_external_entrypoint`, audience `tenant_observability`, source `tidbcloud/observability`, sample host `o11y-ds.us-west-2.nightly.shared.aws.tidbcloud.com`, sample path `/[0-9a-fA-F-]{36}/(metrics|diagnosis)/`
- `dataservice-regional-svc`: status `confirmed_external_entrypoint`, audience `tenant_data_api`, source `tidbcloud/dataservices`, sample host `regionalsvc01.ap-southeast-1.dev.shared.alicloud.tidbcloud.com`, sample path `/dataservice(/|$)(.*)`
- `serverless-ops-service`: status `confirmed_external_entrypoint`, audience `operator_api`, source `tidbcloud/aws-shared-provider`, sample host `regionalsvc01.ap-southeast-1.dev.shared.alicloud.tidbcloud.com`, sample path `/ops`
- `devops-service`: status `confirmed_external_entrypoint`, audience `preview_web`, source `tidbcloud/devops`, sample host `investibook.tidbcloud.com`, sample path `/`
- `metrics-integration`: status `confirmed_external_entrypoint`, audience `unknown`, source `tidbcloud/metrics-integration`, sample host `None`, sample path `None`
- `dedicated-cluster-ng-service`: status `shared_gateway_exposure`, audience `shared_gateway_api`, source `tidbcloud/cluster-service-ng`, sample host `regional-api.*.tidbcloud.com via shared Kong gateway`, sample path `/api/premium`
- `config-center-regional`: status `shared_gateway_exposure`, audience `shared_gateway_api`, source `tidbcloud/config-center`, sample host `regional-api.*.tidbcloud.com via shared Kong gateway`, sample path `/config-center`
- `dedicated-cluster-service`: status `shared_gateway_exposure`, audience `shared_gateway_api`, source `tidbcloud/infra-provider (cluster-server) + tiworkload agent bundle`, sample host `regional-api.*.tidbcloud.com via shared Kong gateway`, sample path `/cluster-server`
- `dedicated-infra-apiserver`: status `confirmed_external_entrypoint`, audience `unknown`, source `infra-cd apiserver stack + third-party kubernetes control-plane bundle`, sample host `None`, sample path `None`
- `dedicated-ticdc-service`: status `shared_gateway_exposure`, audience `shared_gateway_api`, source `tidbcloud/dataflow-service`, sample host `regional-api.*.tidbcloud.com via shared Kong gateway`, sample path `/ticdc-service`
- `tcidm`: status `shared_gateway_exposure`, audience `shared_gateway_api`, source `tidbcloud/tcidm`, sample host `regional-api.*.tidbcloud.com via shared Kong gateway`, sample path `/api/v1/tcidm`

## Unresolved But Important Candidates

- `account-svc`: source `tidbcloud/account`, deployment exposure exists but no resolved public host yet
- `authserver`: source `tidbcloud/auth-server`, deployment exposure exists but no resolved public host yet
- `tidb-mgmt-portal`: source `tidbcloud/tidb-management-service`, deployment exposure exists but no resolved public host yet

## Machine-Readable Output

- `knowledge/deployment/public-service-catalog.json`