From 28d4b2316a5a5914c2b4ecfbce62e03a60a6e7e7 Mon Sep 17 00:00:00 2001 From: Dhia Ayachi Date: Fri, 9 Jul 2021 15:24:16 -0400 Subject: [PATCH] fix typo and add a TODO section for the remaining stuff --- docs/service-mesh/ca/README.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/docs/service-mesh/ca/README.md b/docs/service-mesh/ca/README.md index 809dae8253..2a3d14d637 100644 --- a/docs/service-mesh/ca/README.md +++ b/docs/service-mesh/ca/README.md @@ -1,6 +1,6 @@ # Certificate Authority (Connect CA) -The Certificate Authority subsystem manages a CA trust chain for issuing certificates to +The Certificate Authority Subsystem manages a CA trust chain for issuing certificates to services and client agents (via auto-encrypt and auto-config). The code for the Certificate Authority is in the following packages: @@ -93,10 +93,11 @@ Periodic (or background) opeartions are started automatically by the Consul lead 2. (via in-process call to `RPC.ConnectCA.Sign`) - called by auto-encrypt to sign a leaf cert for a client agent 3. called by Auto-Config to sign a leaf cert for a client agent -### detailed call flow +## detailed call flow ![CA Leader Sequence](./ca-leader-sequence.svg) [source](./ca-leader-sequence.mmd) -- sequence diagram for leaf signing +####TODO: +- sequence diagram for leaf signing - sequence diagram for CA cert rotation