Enterprise Metadata Management System  ·  View 04 of 22  ·  Structure

Container Architecture

The deployable units, grouped by responsibility, and the calls that cross between them.

Editable source SVG draw.io All views
Enterprise Metadata Platform · Kubernetes
Enterprise Metadata Platform · Kubernetes
Experience
Experience
Catalog Web App
React SPA
Catalog Web App...
Governance Console
React SPA
Governance Console...
Access
Access
API Gateway
OIDC · rate limit
API Gateway...
GraphQL Service
graph-shaped read
GraphQL Service...
REST Service
write · bulk
REST Service...
Event Egress
Kafka · webhook
Event Egress...
Discovery services
Discovery services
Catalog Service
Catalog Service
Search Service
Search Service
Lineage Service
Lineage Service
Glossary Service
Glossary Service
Governance services
Governance services
Classification Service
Classification Service
Quality Metadata
Quality Metadata
Workflow Engine
Temporal
Workflow Engine...
Notification Service
Notification Service
Entitlement Filter
ABAC
Entitlement Filter...
Ingestion
Ingestion
Harvest Orchestrator
Temporal
Harvest Orchestrator...
Connector Runtime
plugin SDK
Connector Runtime...
Metadata Event Bus
Kafka · MCP/MCL
Metadata Event Bus...
Enrichment Workers
profile · classify
Enrichment Workers...
Merge & Precedence
Merge & Precedence
Persistence
Persistence
Aspect Store
PostgreSQL
Aspect Store...
Knowledge Graph
Neo4j
Knowledge Graph...
Search Index
OpenSearch
Search Index...
Payload Archive
S3
Payload Archive...
Audit Log
append-only
Audit Log...
Source systems
200 registered
Source systems...
Entra ID
OIDC · SCIM
Entra ID...
Policy enforcement
Policy enforcement
Quality engines
Quality engines
HTTPS
HTTPS
read
read
write
write
search
search
query
query
commit
commit
project
project
harvest
harvest
tags
tags
results
results
Container Architecture (C4 Level 2)
Container Architecture (C4 Level 2)
Application we own
Application we own
Interface / broker
Interface / broker
Queue / topic
Queue / topic
Security / platform
Security / platform
Data store
Data store
External / third party
External / third party
synchronous
synchronous
event / async
event / async
batch
batch
Eleven edges shown, others omitted for legibility. Identity is validated at the gateway on every call; the authoritative call graph is the service contract register.
Eleven edges shown, others omitted for legibility. Identity is validated at the gateway on every call; the authoritative call graph is the service contract register.
v 1.0 · owner Data & AI Architecture · date 2026-08
v 1.0 · owner Data & AI Architecture · date 2026-08
Text is not SVG - cannot display

Decisions

  • One durable execution engine, Temporal, serves both harvest orchestration and human approval workflows. Two engines for two kinds of long-running work is a cost paid twice.
  • Merge and precedence is a separate container from the enrichment workers so that inference can be scaled, retried and rolled back without touching the component that decides what is true.
  • The connector runtime is packaged so the same image runs in-platform or as an agent inside a customer network (view 16).

Deliberate omission

  • Nine further edges are omitted. Everything a service may call is in the contract register; this view shows only the calls that carry the main journeys.
  • Sidecars, service mesh and autoscaling detail belong to view 16.

Assumption

  • Kubernetes is the enterprise runtime standard, and Kafka is already operated as a managed service. Both are consumed, not introduced by this programme.