Internal Service Catalog

Below is the active service matrix. In accordance with platform security standards, absolute production FQDNs are omitted. Replace <zone-domain> with your provisioned cluster target (e.g., prod.<region>.carpenter.internal or active zone assigned via local profile).

Canonical Service Matrix

Service Identifier	Logical Endpoint	Target Infrastructure	Ingress Gateway	Status
Core API Gateway	https://api.<zone-domain>	AWS Multi-Region (us-east-1 / eu-west-1)	Regional ALB mTLS	RESTRICTED
Telemetry Ingest	https://telemetry.<zone-domain>	Bare-Metal Dedicated Server	Caddy on Metal (Zero-Inbound)	HEALTHY
Build Artifacts	https://artifacts.<zone-domain>	Bare-Metal Storage Cluster	Nginx w/ Hardware Security Module	HEALTHY
Realtime Compute	https://stream.<zone-domain>	AWS Multi-Region (ap-northeast-1)	NLB w/ TLS Termination	HEALTHY
Runtime Metrics	https://metrics.<zone-domain>	Bare-Metal Monitor Node	Caddy Proxy Engine	DEGRADED

Zone Resolution

Base domains are provisioned into your developer environment via ~/.carpenter/profile.env upon certificate onboarding. Workstation DNS queries resolve through split-horizon internal root servers.

Handshake Verification

Client certificates must match the issued identity for the corresponding cluster environment:

# Sourcing environment profile and invoking regional endpoint
source ~/.carpenter/profile.env

curl -s --cert ~/.certs/carpenter-client.crt \
     --key ~/.certs/carpenter-client.key \
     "https://api.${CARPENTER_ZONE_DOMAIN}/v2/system/healthcheck"