← 输入框|github.com|刷新
Skip to content

docs: update readme architecture diagram - #37

Merged
bbedward merged 1 commit into
masterfrom
docs/readme-architecture
Oct 17, 2026
Merged

bbedward merged 1 commit into
masterfrom
docs/readme-architecture

Conversation

@bbedward

Copy link
Copy Markdown
Contributor

The README diagram was out of date.

Fixed:

  • API no longer impersonates users. It uses its own ServiceAccount (removed in f74fb66).
  • No separate OIDC issuer. The API signs its own tokens and serves discovery/JWKS at /api/oauth2.
  • The builder Job creates the Service CR. The API only applies it on redeploy, rollback and removal.
  • One CRD kind, Service in unbind.unbind.app/v1.
  • Redis also holds rate limits.

Added: MCP server, gateway with cert-manager, GitHub webhooks and source, Railpack, in-cluster or external registry, workloads the operator creates, Loki/Alloy, VictoriaMetrics, S3 backups.

Also fixes step 4 in How Unbind Works, which said the API writes the custom resource.

The diagram still showed user impersonation, a separate OIDC issuer and
the API creating the Service CR. The API uses its own ServiceAccount and
is its own issuer, and the builder Job writes the CR. Adds the MCP
server, gateway, GitHub, logs, metrics and backups.

Fixes the same CR claim in How Unbind Works.
@bbedward
bbedward merged commit c06b3d2 into master Oct 17, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant