{},
			},
		},
		leaf: leafSpec{
			sans: []string{"dns:example.com"},
			ekus: []string{"msSGC"},
		},
		requestedEKUs: []ExtKeyUsage{ExtKeyUsageServerAuth},
		expectedError: "incompatible key usage",
	},

	// An invalid DNS SAN should be detected only at validation time so
	// that we can process CA certificates in the wild that have invalid SANs.
	// See https://github.com/golang/go/issues/23995

// limitations under the License.

// dot -Tpng src/docs/userguide/img/xctest-task-graph.dot > src/docs/userguide/img/xctest-task-graph.png
digraph xctestTaskGraph {
  graph [ dpi = 100, fontname="Sans"];
  node [fontname = "Sans"];
  edge [fontname = "Sans"];
  node [shape=rectangle, fixedsize=true, width=2.5, height=0.5];
  node [style=filled, fillcolor="#cfe2f3"]
  rankdir=LR

// dot -Tpng src/docs/userguide/img/cpp-shared-library-task-graph.dot > src/docs/userguide/img/cpp-shared-library-task-graph.png
digraph cppSharedLibraryTaskGraph {
  graph [ dpi = 100, fontname="Sans"];
  node [fontname = "Sans"];
  edge [fontname = "Sans"];
  node [shape=rectangle, fixedsize=true, width=2.5, height=0.5];
  node [style=filled, fillcolor="#cfe2f3"]
  rankdir=LR

			// Service properly sets SAN. Since it's not external, we do not add the SANs automatically though
			sans: nil,
		},
		{
			name:    "Kubernetes service and EDS ServiceEntry ISTIO_MUTUAL",
			objs:    []runtime.Object{service, pod, endpoint},
			configs: []config.Config{drIstioMTLS, seEDS},
			// The Service has precedence, so its cluster will be used
			sans: []string{"spiffe://cluster.local/ns/default/sa/pod"},

// dot -Tpng src/docs/userguide/img/swift-sourcesets-compilation.dot > src/docs/userguide/img/swift-sourcesets-compilation.png
digraph swiftSourcesetsCompilation {
  graph [ dpi = 100, fontname="Sans"];
  node [fontname = "Sans"];
  edge [fontname = "Sans"];
  node [shape=rectangle, fixedsize=true, width=2.6, height=0.8];

  subgraph firstLine {
    {rank=same swiftCompileVariant implementation variantImplementation}

// dot -Tpng src/docs/userguide/img/xctest-configurations.dot > src/docs/userguide/img/xctest-configurations.png
digraph xctestConfigurations {
  graph [ dpi = 100, fontname="Sans"];
  node [fontname = "Sans"];
  edge [fontname = "Sans"];
  node [shape=rectangle, fixedsize=true, width=3.5, height=0.5];

  subgraph central {
    node[style=filled, fillcolor=white]

digraph configurations {
    rankdir = BT;
   graph [ dpi = 100, fontname="Sans"];
   node [fontname = "Sans"];
   edge [fontname = "Sans"];

   "apiElements" [shape="box", label=<<B>apiElements</B>(C)>, color="pink", bgcolor="pink", style="filled"]
   "apiElements" -> "api"
   "apiElements" -> "compileOnlyApi"

   "api" [shape="box", label=<<B>api</B>>, color="chartreuse3", bgcolor="chartreuse3", style="filled"]

// dot -Tpng src/docs/userguide/img/cpp-application-variant-task-graph.dot > src/docs/userguide/img/cpp-application-variant-task-graph.png
digraph cppLibraryVariantTaskGraph {
  graph [ dpi = 100, fontname="Sans"];
  node [fontname = "Sans"];
  edge [fontname = "Sans"];
  node [shape=rectangle, fixedsize=true, width=2.5, height=0.5];
  node [style="dashed,filled", fillcolor=grey]
  rankdir=LR

digraph swiftLibraryVariantTaskGraph {
  graph [ dpi = 100, fontname="Sans"];
  node [fontname = "Sans"];
  edge [fontname = "Sans"];
  node [shape=rectangle, fixedsize=true, width=2.5, height=0.5];
  node [style="dashed,filled", fillcolor=grey]
  rankdir=LR

// dot -Tpng src/docs/userguide/img/swift-application-task-graph.dot > src/docs/userguide/img/swift-application-task-graph.png
digraph swiftApplicationTaskGraph {
  graph [ dpi = 100, fontname="Sans"];
  node [fontname = "Sans"];
  edge [fontname = "Sans"];
  node [shape=rectangle, fixedsize=true, width=2.5, height=0.5];
  node [style=filled, fillcolor="#cfe2f3"]
  rankdir=LR

  compileDebugSwift -> linkDebug -> assemble -> build [dir=back]