models-as-a-service: Network¶

Service Map¶

graph LR
    classDef svc fill:#2ecc71,stroke:#27ae60,color:#fff
    classDef test fill:#95a5a6,stroke:#7f8c8d,color:#fff
    classDef component fill:#3498db,stroke:#2980b9,color:#fff
    classDef ext fill:#e74c3c,stroke:#c0392b,color:#fff

    models_as_a_service["models-as-a-service"]:::component
    models_as_a_service --> svc_0["maas-api\nClusterIP: 8080/TCP"]:::svc
    models_as_a_service --> svc_1["maas-api\nClusterIP: 0/TCP,8443/TCP"]:::svc
    models_as_a_service --> svc_2["payload-processing\nClusterIP: 9004/TCP"]:::svc

Services¶

Name	Type	Ports	Source
maas-api	ClusterIP	8080/TCP	`deployment/base/maas-api/core/service.yaml`
maas-api	ClusterIP	0/TCP, 8443/TCP	`deployment/base/maas-api/overlays/tls/service-patch.yaml`
payload-processing	ClusterIP	9004/TCP	`deployment/base/payload-processing/manager/service.yaml`

Ingress / Routing¶

Kind	Name	Hosts	Paths	TLS	Source
DestinationRule	maas-api-backend-tls			no	`deployment/base/maas-api/overlays/tls/destinationrule.yaml`
HTTPRoute	maas-api-route		/v1/models, /maas-api	no	`deployment/base/maas-api/networking/httproute.yaml`

Network Policies¶

Name	Policy Types	Source
maas-api-cleanup-restrict	Egress, Ingress	`deployment/base/maas-api/core/networkpolicy-cleanup.yaml`
maas-api-cleanup-restrict		`deployment/base/maas-api/overlays/tls/networkpolicy-cleanup-patch.yaml`
maas-authorino-allow	Ingress	`deployment/base/maas-api/networking/maas-authorino-networkpolicy.yaml`
maas-authorino-allow	Ingress	`scripts/data/maas-authorino-networkpolicy.yaml`
maas-controller-allow-monitoring	Ingress	`deployment/base/maas-controller/monitoring/networkpolicy.yaml`

Network Policy Graph¶

Visual representation of NetworkPolicy rules. Ingress rules show what traffic is allowed into pods, egress rules show what traffic is allowed out.

graph LR
    classDef policy fill:#e74c3c,stroke:#c0392b,color:#fff
    classDef pod fill:#3498db,stroke:#2980b9,color:#fff
    classDef external fill:#95a5a6,stroke:#7f8c8d,color:#fff

    models_as_a_service["models-as-a-service\nPods"]:::pod
    np_0_maas_api_cleanup_restrict{{"maas-api-cleanup-restrict\nEgress, Ingress"}}:::policy
    np_0_maas_api_cleanup_restrict --> models_as_a_service
    np_1_maas_api_cleanup_restrict{{"maas-api-cleanup-restrict\nIngress"}}:::policy
    np_1_maas_api_cleanup_restrict --> models_as_a_service
    np_2_maas_authorino_allow{{"maas-authorino-allow\nIngress"}}:::policy
    np_2_maas_authorino_allow --> models_as_a_service
    np_3_maas_authorino_allow{{"maas-authorino-allow\nIngress"}}:::policy
    np_3_maas_authorino_allow --> models_as_a_service
    np_4_maas_controller_allow_monitoring{{"maas-controller-allow-monitoring\nIngress"}}:::policy
    np_4_maas_controller_allow_monitoring --> models_as_a_service