How lina123-alt/k8s-security-pipeline works
Orderly is an order-management application: users register or sign in, then view a product catalog, create orders, and track them; operator/admin roles can advance order status or delete orders. The React client calls a FastAPI backend, which authenticates requests, applies role checks, and persists order and user data. The tree and sampled source establish these primary paths; product definitions and some model details are represented only by their exact tree paths, so their internal behavior is not expanded.
Main entry points: orders.py Order endpoints · router.py Auth endpoints · main.py FastAPI application · App.jsx Orderly interface
Components 18
Web client
- Orderly interface
frontend/src/App.jsx - Browser session
- React entry
frontend/src/main.jsx
API services
- FastAPI application
backend/app/main.py - Order endpoints
backend/app/api/orders.py - Product catalog
backend/app/api/products.py - Order input schema
backend/app/schemas/order.py - Rate limiter
backend/app/limiter.py
Identity and access
- Auth endpoints
backend/app/auth/router.py - User model
backend/app/auth/models.py - Token security
backend/app/auth/security.py - Role checks
backend/app/auth/rbac.py - Revoked tokens
backend/app/auth/blacklist.py
Persistence
- Order model
backend/app/models/order.py - Database sessions
backend/app/database/database.py - SQL database
- Redis
Other components
- User
Connections 23
- User → Orderly interface: uses
- React entry → Orderly interface: renders
- Orderly interface → Browser session: reads/writes
- Orderly interface → FastAPI application: HTTP requests
- FastAPI application → Auth endpoints: mounts
- FastAPI application → Order endpoints: mounts
- FastAPI application → Rate limiter: configures
- Auth endpoints → Database sessions: opens sessions
- Auth endpoints → User model: queries users
- Auth endpoints → Token security: hashes/verifies
- Auth endpoints → Role checks: checks roles
- Auth endpoints → Revoked tokens: revokes tokens
- Auth endpoints → Rate limiter: limits requests
- Order endpoints → Database sessions: opens sessions
- Order endpoints → Token security: verifies tokens
- Order endpoints → Role checks: checks roles
- Order endpoints → Product catalog: reads catalog
- Order endpoints → Order input schema: validates input
- Order endpoints → Order model: queries/mutates
- Database sessions → SQL database: connects
- Revoked tokens → Redis: checks/revokes
- Role checks → Token security: verifies token
- Token security → Revoked tokens: checks revocation