193 lines
5.9 KiB
Text
193 lines
5.9 KiB
Text
# Enterprise Mode Schema
|
|
# Production-grade deployment with high availability, compliance, and extensive operations
|
|
# Resources: 16+ CPU, 32+ GB RAM, 500GB+ disk with HA setup
|
|
|
|
{
|
|
EnterpriseModeConfig = {
|
|
# Deployment mode identifier
|
|
mode | String = 'enterprise,
|
|
|
|
# Resource allocation (distributed across replicas)
|
|
resources = {
|
|
cpu_cores | String,
|
|
memory_mb | String,
|
|
disk_gb | String,
|
|
max_connections | String | optional,
|
|
},
|
|
|
|
# Service enablement (fully featured)
|
|
services = {
|
|
orchestrator = {
|
|
enabled | String,
|
|
storage_backend | String,
|
|
workers | String | optional,
|
|
queue_max_concurrent_tasks | String | optional,
|
|
batch_parallel_limit | Number | optional,
|
|
multi_workspace_enabled | String | optional,
|
|
high_availability | String,
|
|
},
|
|
control_center = {
|
|
enabled | String,
|
|
database | String,
|
|
high_availability | String,
|
|
audit_logging | String,
|
|
policy_caching_enabled | String | optional,
|
|
},
|
|
mcp_server = {
|
|
enabled | String,
|
|
protocol | String | optional,
|
|
max_concurrent_tools | String | optional,
|
|
caching_enabled | String | optional,
|
|
replication_enabled | String | optional,
|
|
},
|
|
installer = {
|
|
enabled | String | optional,
|
|
},
|
|
prometheus = {
|
|
enabled | String,
|
|
port | Number | optional,
|
|
retention_days | Number | optional,
|
|
},
|
|
grafana = {
|
|
enabled | String,
|
|
port | Number | optional,
|
|
},
|
|
loki = {
|
|
enabled | String,
|
|
retention_days | Number | optional,
|
|
},
|
|
harbor = {
|
|
enabled | String | optional,
|
|
registry_url | String | optional,
|
|
},
|
|
postgresql = {
|
|
enabled | String,
|
|
replicas | String | optional,
|
|
backup_enabled | String | optional,
|
|
backup_schedule | String | optional,
|
|
},
|
|
},
|
|
|
|
# High Availability (required)
|
|
ha = {
|
|
enabled | String,
|
|
replicas | String,
|
|
min_replicas | String | optional,
|
|
max_replicas | String | optional,
|
|
load_balancer | String,
|
|
service_mesh | String | optional,
|
|
database_replication | String | optional,
|
|
backup_enabled | String,
|
|
backup_schedule | String | optional,
|
|
disaster_recovery_enabled | String | optional,
|
|
},
|
|
|
|
# Security configuration (comprehensive)
|
|
security = {
|
|
auto_generate_secrets | String,
|
|
kms_backend | String,
|
|
audit_logging | String,
|
|
audit_log_retention_days | Number | optional,
|
|
tls_enabled | String,
|
|
tls_certificate_provider | String | optional,
|
|
rbac_enabled | String,
|
|
rbac_hierarchy | String | optional,
|
|
mfa_enabled | String,
|
|
mfa_method | String | optional,
|
|
mfa_required_for_admin | String | optional,
|
|
session_timeout | Number | optional,
|
|
password_policy_enforced | String | optional,
|
|
api_rate_limiting_enabled | String | optional,
|
|
},
|
|
|
|
# Compliance and governance
|
|
compliance = {
|
|
enabled | String,
|
|
framework | String,
|
|
data_retention_years | String | optional,
|
|
encryption_at_rest | String,
|
|
encryption_in_transit | String,
|
|
field_level_encryption | String | optional,
|
|
audit_trail_enabled | String,
|
|
anonymization_enabled | String | optional,
|
|
},
|
|
|
|
# Multi-tenancy (optional)
|
|
multi_tenancy = {
|
|
enabled | String | optional,
|
|
tenant_isolation | String | optional,
|
|
tenant_limits_enabled | String | optional,
|
|
},
|
|
|
|
# Disaster recovery
|
|
disaster_recovery = {
|
|
enabled | String,
|
|
rto_minutes | Number | optional,
|
|
rpo_minutes | Number | optional,
|
|
backup_location | String,
|
|
cross_region_backup | String | optional,
|
|
},
|
|
|
|
# User and access management
|
|
users = {
|
|
ldap_enabled | String | optional,
|
|
ldap_server_url | String | optional,
|
|
oauth2_enabled | String | optional,
|
|
oauth2_provider | String | optional,
|
|
saml_enabled | String | optional,
|
|
saml_idp_url | String | optional,
|
|
max_active_sessions | String | optional,
|
|
password_expiration_days | Number | optional,
|
|
inactive_session_timeout | Number | optional,
|
|
},
|
|
|
|
# Networking (enterprise-grade)
|
|
networking = {
|
|
bind_localhost_only | String,
|
|
expose_services | String,
|
|
load_balancer | String,
|
|
allowed_origins | Array String | optional,
|
|
cors_enabled | String | optional,
|
|
waf_enabled | String | optional,
|
|
ddos_protection_enabled | String | optional,
|
|
vpc_enabled | String | optional,
|
|
network_segmentation | String | optional,
|
|
},
|
|
|
|
# Monitoring and observability (comprehensive)
|
|
monitoring = {
|
|
enabled | String,
|
|
metrics_enabled | String,
|
|
metrics_scrape_interval_seconds | Number | optional,
|
|
metrics_retention_days | Number | optional,
|
|
health_checks_enabled | String,
|
|
health_check_interval_seconds | Number | optional,
|
|
logging_level | String | optional,
|
|
distributed_tracing_enabled | String,
|
|
alerting_enabled | String | optional,
|
|
alert_channels | Array String | optional,
|
|
performance_profiling | String | optional,
|
|
resource_usage_monitoring | String | optional,
|
|
},
|
|
|
|
# Support and operations
|
|
operations = {
|
|
support_level | String | optional,
|
|
sla_enabled | String | optional,
|
|
sla_uptime_percentage | Number | optional,
|
|
incident_response_enabled | String | optional,
|
|
runbook_enabled | String | optional,
|
|
on_call_rotation_enabled | String | optional,
|
|
},
|
|
|
|
# Performance and optimization (production-ready)
|
|
performance = {
|
|
cache_enabled | String,
|
|
cache_ttl_seconds | Number | optional,
|
|
cache_size_mb | String | optional,
|
|
batch_size | Number | optional,
|
|
connection_pooling_enabled | String | optional,
|
|
query_caching_enabled | String | optional,
|
|
},
|
|
},
|
|
}
|