Technical context¶
External systems and interfaces¶
| External system | Interface | Role |
|---|---|---|
| IDSA Dataspace Protocol | HTTP/JSON (DSP endpoints) | Governs all connector-to-connector communication for contract negotiation and data transfer. |
| Gaia-X Trust Framework | DID Web + Verifiable Credentials | Defines how participants establish identity and trust in a federated environment. |
| DPoP (RFC 7800) | JWT in the Authorization header | Proof-of-possession mechanism used to authenticate dataspace requests. The token's issuer is a did:web URI. |
| S3-compatible object store | S3 API | Backend storage used by rdsp-s3. In the reference deployment, MinIO provides this interface. |
| Kubernetes / FluxCD | kubectl / Flux API | Deployment and configuration management. All cluster state is declared in Git and applied by FluxCD. |
| IONOS Cloud | Terraform / IONOS provider | Managed Kubernetes clusters are provisioned via Terraform on IONOS Cloud infrastructure. |
System boundary¶
dataLOFT implements the management services layer. Data services, such as r-squared, are external to the platform and connect to it via the gRPC provider interface defined in run-dsrpc. The platform does not define or constrain how data services store or process data internally.