sgx_mtls_infra.puml

footer 複数マシン(Node)にまたがるEnclaveアプリ

skinparam nodesep 10
skinparam ranksep 10

' Azure
!define AzurePuml https://raw.githubusercontent.com/RicardoNiepel/Azure-PlantUML/release/2-1/dist

!includeurl AzurePuml/AzureCommon.puml
!includeurl AzurePuml/AzureSimplified.puml

!includeurl AzurePuml/Security/AzureKeyVault.puml

' Kubernetes
!define KubernetesPuml https://raw.githubusercontent.com/dcasati/kubernetes-PlantUML/master/dist

!includeurl KubernetesPuml/kubernetes_Common.puml
!includeurl KubernetesPuml/kubernetes_Context.puml
!includeurl KubernetesPuml/kubernetes_Simplified.puml

!includeurl KubernetesPuml/OSS/KubernetesIng.puml
!includeurl KubernetesPuml/OSS/KubernetesSvc.puml
!includeurl KubernetesPuml/OSS/KubernetesPod.puml

scale max 1024 width

actor "Client" as alice
left to right direction

' Kubernetes Components
Cluster_Boundary(cluster, "Cluster") {
  KubernetesSvc(svc1, "", "")
  Node_Boundary(ns1, "Node") {      
    KubernetesPod(pod1, "Enclave", "")
    KubernetesPod(pod2, "Enclave", "")
  }
  Node_Boundary(ns2, "Node") {
    KubernetesPod(pod3, "Enclave", "")
  }
  Node_Boundary(ns3, "Node") {
    KubernetesPod(rnd, "Random\nGenerator", "")
    database SealedData
  }
}

alice --> svc1: E2EE
svc1--> pod1
svc1--> pod2
svc1--> pod3

pod1 ..> rnd: mTLS
pod2 ..> rnd: mTLS
pod3 ..> rnd: mTLS

rnd --> SealedData