istio.io/istio@v0.0.0-20240520182934-d79c90f27776/architecture/security/docs/ca.dot (about)

     1  digraph {
     2      grpc -> ca [label="Send CSR gRPC Request"]
     3      subgraph cluster_istioagent {
     4          label = "Istio Agent"
     5          color="orange"
     6          sds
     7          SecretManager -> caClient [label="Sign CSR"]
     8          caClient -> grpc
     9          grpc -> TokenProvider [dir=none,label="Fetch JWT",color=purple]
    10          grpc -> cfiles [dir=none,label="Fetch Cert",color=purple]
    11  
    12          sds -> SecretManager [label="Generate certificate"]
    13          SecretManager -> cfiles [label="Write certs to file"]
    14          cfiles [label="Certificate Files"]
    15          grpc [shape=diamond]
    16      }
    17  
    18      subgraph cluster_istiod {
    19          label = "Istiod"
    20          color="lightblue"
    21          ca
    22      }
    23  }