e26c9f46ab
Co-authored-by: Dhia Ayachi <dhia@hashicorp.com>
32 lines
805 B
Plaintext
32 lines
805 B
Plaintext
graph TD
|
|
|
|
ExternalRootCA["External RootCA (optional)"]
|
|
|
|
subgraph "Consul Primary"
|
|
PrimaryRootCA["Primary Root CA"]
|
|
PrimarySigningCA["Primary Signing CA (conditional)"]
|
|
end
|
|
|
|
subgraph "Consul Secondary"
|
|
SeconarySigningCA["Seconary Signing CA"]
|
|
end
|
|
|
|
LeafCertAgentPrimary[Leaf Cert Client Agent]
|
|
LeafCertServicePrimary[Leaf Cert Service]
|
|
|
|
LeafCertAgentSecondary[Leaf Cert Client Agent]
|
|
LeafCertServiceSecondary[Leaf Cert Service]
|
|
|
|
|
|
ExternalRootCA -.-> PrimaryRootCA
|
|
PrimaryRootCA -.-> PrimarySigningCA
|
|
|
|
PrimaryRootCA --> SeconarySigningCA
|
|
|
|
PrimarySigningCA --> LeafCertAgentPrimary
|
|
PrimarySigningCA --> LeafCertServicePrimary
|
|
|
|
SeconarySigningCA --> LeafCertAgentSecondary
|
|
SeconarySigningCA --> LeafCertServiceSecondary
|
|
|