Authoritative source: specs/platform/data-model.spec.md; specs/security/rbac-enforcement.spec.md

Current API relationships. Resources are top-level; placement references converge on Gateway, while service accounts are scoped to one Gateway.

ManagedCluster PK string id string name string provider string region string status Gateway PK string id string name FK string cluster_id string namespace string phase string status OpenShellGatewayServiceAccount PK string id FK string gateway_id string role string status FK string created_by_user_id hosts authorizes
View Mermaid source
erDiagram
  ManagedCluster ||--o{ Gateway : hosts
  Gateway ||--o{ OpenShellGatewayServiceAccount : authorizes
  ManagedCluster {
    string id PK
    string name
    string provider
    string region
    string status
  }
  Gateway {
    string id PK
    string name
    string cluster_id FK
    string namespace
    string phase
    string status
  }
  OpenShellGatewayServiceAccount {
    string id PK
    string gateway_id FK
    string role
    string status
    string created_by_user_id FK
  }

Edit this diagram in Craft Mermaid