![SDS decision flow](docs/sds-flow.svg)

### Default CA Flow through istio-agent

![CA Flow](docs/ca.svg)

A single SDS request from Envoy goes through a few different layers in istio-agent.

### Ngắn gọn

FastAPI có các giá trị mặc định hợp lý cho mọi thứ, với các cấu hình tùy chọn ở mọi nơi. Tất cả các tham số có thể được tinh chỉnh để thực hiện những gì bạn cần và để định nghĩa API bạn cần.

Nhưng mặc định, tất cả **đều hoạt động**.

### Validation

* Validation cho đa số (hoặc tất cả?) **các kiểu dữ liệu** Python, bao gồm:
    * JSON objects (`dict`).

		} else {
			for i, ca := range secret.CertChain {
				t := "Intermediate"
				if i == 0 {
					t = "Leaf"
				} else if i == len(secret.CertChain)-1 {
					t = "Root"
				}
				n := new(big.Int)
				n, _ = n.SetString(ca.SerialNumber, 10)
				fmt.Fprintf(w, "%v\t%v\t%v\t%v\t%x\t%v\t%v\n",
					secret.Identity, t, secret.State, certNotExpired(ca), n, valueOrNA(ca.ExpirationTime), valueOrNA(ca.ValidFrom))
			}

 * either express or implied. See the License for the specific language
 * governing permissions and limitations under the License.
 */
package org.codelibs.fess.es.config.cbean.ca;

import org.codelibs.fess.es.config.cbean.ca.bs.BsElevateWordCA;

/**
 * @author ESFlute (using FreeGen)
 */
public class ElevateWordCA extends BsElevateWordCA {

 * either express or implied. See the License for the specific language
 * governing permissions and limitations under the License.
 */
package org.codelibs.fess.es.config.cbean.ca;

import org.codelibs.fess.es.config.cbean.ca.bs.BsFailureUrlCA;

/**
 * @author ESFlute (using FreeGen)
 */
public class FailureUrlCA extends BsFailureUrlCA {

 * either express or implied. See the License for the specific language
 * governing permissions and limitations under the License.
 */
package org.codelibs.fess.es.config.cbean.ca;

import org.codelibs.fess.es.config.cbean.ca.bs.BsRelatedQueryCA;

/**
 * @author ESFlute (using FreeGen)
 */
public class RelatedQueryCA extends BsRelatedQueryCA {

 * either express or implied. See the License for the specific language
 * governing permissions and limitations under the License.
 */
package org.codelibs.fess.es.config.cbean.ca;

import org.codelibs.fess.es.config.cbean.ca.bs.BsRequestHeaderCA;

/**
 * @author ESFlute (using FreeGen)
 */
public class RequestHeaderCA extends BsRequestHeaderCA {

 * either express or implied. See the License for the specific language
 * governing permissions and limitations under the License.
 */
package org.codelibs.fess.es.config.cbean.ca;

import org.codelibs.fess.es.config.cbean.ca.bs.BsThumbnailQueueCA;

/**
 * @author ESFlute (using FreeGen)
 */
public class ThumbnailQueueCA extends BsThumbnailQueueCA {

 * either express or implied. See the License for the specific language
 * governing permissions and limitations under the License.
 */
package org.codelibs.fess.es.log.cbean.ca;

import org.codelibs.fess.es.log.cbean.ca.bs.BsUserInfoCA;

/**
 * @author ESFlute (using FreeGen)
 */
public class UserInfoCA extends BsUserInfoCA {

    sds -> ca [label="CSR"]

    xdsproxy -> discovery [dir=both,label="ADS"]

    envoy [shape=hexagon, color=purple]

    subgraph cluster_istioagent {
        label = "Istio Agent"
        color="orange"
        sds
        xdsproxy
    }

    subgraph cluster_istiod {
        label = "Istiod"
        color="lightblue"
        ca
        discovery
    }