Tetrate Service Mesh Management

naftiko: "1.0.0-alpha1"

info:
  label: "Tetrate Service Mesh Management"
  description: >-
    Unified service mesh management capability for platform engineers and
    DevOps teams. Composes Tetrate Service Bridge management APIs to enable
    multi-cluster mesh onboarding, tenant provisioning, workspace configuration,
    and application API lifecycle management from a single interface.
  tags:
    - Tetrate
    - Service Mesh
    - Istio
    - Multi-Cluster
    - Platform Engineering
    - DevOps
  created: "2026-05-03"
  modified: "2026-05-03"

binds:
  - namespace: env
    keys:
      TSB_TOKEN: TSB_TOKEN

capability:
  consumes:
    - import: tsb
      location: ./shared/tetrate-service-bridge.yaml

  exposes:
    - type: rest
      port: 8080
      namespace: tetrate-mesh-api
      description: "Unified REST API for Tetrate service mesh management."
      resources:
        - path: /v1/organizations
          name: organizations
          description: "Manage TSB organizations"
          operations:
            - method: GET
              name: list-organizations
              description: "List all TSB organizations"
              call: "tsb.list-organizations"
              outputParameters:
                - type: object
                  mapping: "$."
            - method: POST
              name: create-organization
              description: "Create a new TSB organization"
              call: "tsb.create-organization"
              with:
                name: "rest.name"
                displayName: "rest.displayName"
                description: "rest.description"
              outputParameters:
                - type: object
                  mapping: "$."

        - path: /v1/tenants
          name: tenants
          description: "Manage TSB tenants"
          operations:
            - method: GET
              name: list-tenants
              description: "List all tenants in an organization"
              call: "tsb.list-tenants"
              with:
                organization: "rest.organization"
              outputParameters:
                - type: object
                  mapping: "$."
            - method: POST
              name: create-tenant
              description: "Create a new tenant"
              call: "tsb.create-tenant"
              with:
                organization: "rest.organization"
                name: "rest.name"
                displayName: "rest.displayName"
              outputParameters:
                - type: object
                  mapping: "$."

        - path: /v1/workspaces
          name: workspaces
          description: "Manage TSB workspaces"
          operations:
            - method: GET
              name: list-workspaces
              description: "List all workspaces in a tenant"
              call: "tsb.list-workspaces"
              with:
                organization: "rest.organization"
                tenant: "rest.tenant"
              outputParameters:
                - type: object
                  mapping: "$."
            - method: POST
              name: create-workspace
              description: "Create a new workspace with namespace assignments"
              call: "tsb.create-workspace"
              with:
                organization: "rest.organization"
                tenant: "rest.tenant"
                name: "rest.name"
                namespaces: "rest.namespaces"
              outputParameters:
                - type: object
                  mapping: "$."

        - path: /v1/clusters
          name: clusters
          description: "Manage onboarded Kubernetes clusters"
          operations:
            - method: GET
              name: list-clusters
              description: "List all onboarded clusters"
              call: "tsb.list-clusters"
              with:
                organization: "rest.organization"
              outputParameters:
                - type: object
                  mapping: "$."
            - method: POST
              name: onboard-cluster
              description: "Onboard a new Kubernetes cluster"
              call: "tsb.create-cluster"
              with:
                organization: "rest.organization"
                name: "rest.name"
                network: "rest.network"
              outputParameters:
                - type: object
                  mapping: "$."

        - path: /v1/applications
          name: applications
          description: "Manage TSB applications"
          operations:
            - method: GET
              name: list-applications
              description: "List all applications in a tenant"
              call: "tsb.list-applications"
              with:
                organization: "rest.organization"
                tenant: "rest.tenant"
              outputParameters:
                - type: object
                  mapping: "$."
            - method: POST
              name: create-application
              description: "Create a new application"
              call: "tsb.create-application"
              with:
                organization: "rest.organization"
                tenant: "rest.tenant"
                name: "rest.name"
                workspace: "rest.workspace"
              outputParameters:
                - type: object
                  mapping: "$."

        - path: /v1/apis
          name: apis
          description: "Manage application APIs"
          operations:
            - method: GET
              name: list-apis
              description: "List all APIs for an application"
              call: "tsb.list-apis"
              with:
                organization: "rest.organization"
                tenant: "rest.tenant"
                application: "rest.application"
              outputParameters:
                - type: object
                  mapping: "$."
            - method: POST
              name: register-api
              description: "Register an OpenAPI spec as an API"
              call: "tsb.create-api"
              with:
                organization: "rest.organization"
                tenant: "rest.tenant"
                application: "rest.application"
                name: "rest.name"
                openapi: "rest.openapi"
              outputParameters:
                - type: object
                  mapping: "$."

    - type: mcp
      port: 9090
      namespace: tetrate-mesh-mcp
      transport: http
      description: "MCP server for AI-assisted Tetrate service mesh management."
      tools:
        - name: list-organizations
          description: "List all TSB organizations"
          hints:
            readOnly: true
            openWorld: true
          call: "tsb.list-organizations"
          outputParameters:
            - type: object
              mapping: "$."

        - name: list-tenants
          description: "List all tenants within a TSB organization"
          hints:
            readOnly: true
            openWorld: true
          call: "tsb.list-tenants"
          with:
            organization: "tools.organization"
          outputParameters:
            - type: object
              mapping: "$."

        - name: create-tenant
          description: "Create a new tenant within a TSB organization"
          hints:
            readOnly: false
            destructive: false
            idempotent: false
          call: "tsb.create-tenant"
          with:
            organization: "tools.organization"
            name: "tools.name"
            displayName: "tools.displayName"
            description: "tools.description"
          outputParameters:
            - type: object
              mapping: "$."

        - name: list-workspaces
          description: "List all workspaces within a tenant"
          hints:
            readOnly: true
            openWorld: true
          call: "tsb.list-workspaces"
          with:
            organization: "tools.organization"
            tenant: "tools.tenant"
          outputParameters:
            - type: object
              mapping: "$."

        - name: create-workspace
          description: "Create a new workspace with namespace selector"
          hints:
            readOnly: false
            destructive: false
            idempotent: false
          call: "tsb.create-workspace"
          with:
            organization: "tools.organization"
            tenant: "tools.tenant"
            name: "tools.name"
            namespaces: "tools.namespaces"
          outputParameters:
            - type: object
              mapping: "$."

        - name: list-clusters
          description: "List all Kubernetes clusters onboarded to TSB"
          hints:
            readOnly: true
            openWorld: true
          call: "tsb.list-clusters"
          with:
            organization: "tools.organization"
          outputParameters:
            - type: object
              mapping: "$."

        - name: onboard-cluster
          description: "Onboard a new Kubernetes cluster to TSB management"
          hints:
            readOnly: false
            destructive: false
            idempotent: false
          call: "tsb.create-cluster"
          with:
            organization: "tools.organization"
            name: "tools.name"
            network: "tools.network"
            tier1Cluster: "tools.tier1Cluster"
          outputParameters:
            - type: object
              mapping: "$."

        - name: list-applications
          description: "List all applications in a TSB tenant"
          hints:
            readOnly: true
            openWorld: true
          call: "tsb.list-applications"
          with:
            organization: "tools.organization"
            tenant: "tools.tenant"
          outputParameters:
            - type: object
              mapping: "$."

        - name: create-application
          description: "Create a new TSB application linked to a workspace"
          hints:
            readOnly: false
            destructive: false
            idempotent: false
          call: "tsb.create-application"
          with:
            organization: "tools.organization"
            tenant: "tools.tenant"
            name: "tools.name"
            workspace: "tools.workspace"
          outputParameters:
            - type: object
              mapping: "$."

        - name: list-apis
          description: "List all APIs registered to a TSB application"
          hints:
            readOnly: true
            openWorld: true
          call: "tsb.list-apis"
          with:
            organization: "tools.organization"
            tenant: "tools.tenant"
            application: "tools.application"
          outputParameters:
            - type: object
              mapping: "$."

        - name: register-api
          description: "Register an OpenAPI v3 spec as a managed API in TSB"
          hints:
            readOnly: false
            destructive: false
            idempotent: false
          call: "tsb.create-api"
          with:
            organization: "tools.organization"
            tenant: "tools.tenant"
            application: "tools.application"
            name: "tools.name"
            openapi: "tools.openapi"
          outputParameters:
            - type: object
              mapping: "$."

        - name: get-organization
          description: "Get details of a specific TSB organization"
          hints:
            readOnly: true
            openWorld: false
          call: "tsb.get-organization"
          with:
            organization: "tools.organization"
          outputParameters:
            - type: object
              mapping: "$."

        - name: get-tenant
          description: "Get details of a specific TSB tenant"
          hints:
            readOnly: true
            openWorld: false
          call: "tsb.get-tenant"
          with:
            organization: "tools.organization"
            tenant: "tools.tenant"
          outputParameters:
            - type: object
              mapping: "$."