Skip to main content

Application topology

info

For information on the new architecture, as well as determining whether you are using the new or the legacy GitGuardian architecture, explore the New GitGuardian Architecture page.

GitGuardian application consists of several Kubernetes resources.

New GitGuardian architecture

Each nginx pod runs an nginx container serving the dashboard frontend and acting as a proxy for the backend, and a number of different containers serving all backend tasks.

KindDeployment NameUsage
FrontnginxDashboard Frontend and proxy for backend
Backendwebapp-app_exporterOpen Metrics Exporter for applicative metrics
Backendwebapp-hookVCS webhooks events receiver
Backendwebapp-internal_apiBackend for the Dashboard
Backendwebapp-internal_api_longBackend for the Dashboard (no timeout)
Backendwebapp-public_apiPublic API and GGshield scans
Backendwebapp-honeytokenBackend for HoneyToken
SchedulerbeatCelery Beat task scheduler
Workerworker-emailWorkers for queues: email, notifier
Workerworker-reportsWorkers for PDF reports
Workerworker-longWorkers for long tasks: check/install health, asynchronous cleanup tasks, ...
Workerworker-scannersWorkers for historical scans used for VCS (Version Control System)
Workerworker-scanners_odsWorkers for historical scans used for ODS (Other Data Sources)
Workerworker-workerWorkers for queues: celery (default), check_run, realtime VCS, realtime_retry VCS, honeytoken
Workerworker-realtime-odsWorkers for queues: realtime ODS, realtime_retry ODS
Jobpre-deployPre-deployment job performing database migrations
Jobpost-deployPost-deployment job performing long data migrations
ReplicatedreplicatedLicense management and usage data collection
ReplicatedkotsadmKOTS Admin Console (KOTS-based installation only)

Legacy GitGuardian architecture

Each gitguardian-app pod runs an nginx container serving the dashboard frontend and acting as a proxy for the backend, and an app container serving all backend tasks.

KindDeployment nameUsage
Front + Backendgitguardian-appDashboard, Public API (ggshield), VCS webhooks events receiver
Backendgitguardian-exporterOpen Metrics Exporter for applicative metrics
Schedulergitguardian-beatCelery beat task scheduler
Workergitguardian-emailWorkers for queues: email, notifier
Workergitguardian-long-tasksWorkers for long tasks: check/install health, asynchronous cleanup tasks, ...
Workergitguardian-scannerWorkers for historical scans
Workergitguardian-workerWorkers for queues: celery (default), check_run, realtime, realtime_retry, honeytoken
Jobgitguardian-migrationDeployment job performing database migrations
ReplicatedreplicatedLicense management and usage data collection
ReplicatedkotsadmKOTS Admin Console

How can I help you ?