diff --git a/content/zh/docs/ambient/architecture/control-plane/index.md b/content/zh/docs/ambient/architecture/control-plane/index.md index 9addc684ac..c1eaa5b167 100644 --- a/content/zh/docs/ambient/architecture/control-plane/index.md +++ b/content/zh/docs/ambient/architecture/control-plane/index.md @@ -13,7 +13,7 @@ Ambient 使用 Istio {{< gloss "control plane" >}}控制平面{{< /gloss>}}。 该图显示了 ztunnel 代理和 `istiod` 控制平面及控制平面相关组件的流程概述。 {{< image width="100%" -link="ztunnel-architecture.png" +link="ztunnel-architecture.svg" caption="Ztunnel 架构" >}} diff --git a/content/zh/docs/ambient/architecture/control-plane/ztunnel-architecture.png b/content/zh/docs/ambient/architecture/control-plane/ztunnel-architecture.png deleted file mode 100644 index 0500f12b7a..0000000000 Binary files a/content/zh/docs/ambient/architecture/control-plane/ztunnel-architecture.png and /dev/null differ diff --git a/content/zh/docs/ambient/architecture/control-plane/ztunnel-architecture.svg b/content/zh/docs/ambient/architecture/control-plane/ztunnel-architecture.svg new file mode 100644 index 0000000000..853389c200 --- /dev/null +++ b/content/zh/docs/ambient/architecture/control-plane/ztunnel-architecture.svg @@ -0,0 +1,108 @@ + + + + + + + + + + 强制执行 + + L4 策略 + + ztunnel + + + + + + + + xDS 配置 + + + + xDS 客户端 + + + + + + + + App A 证书 + + + + CA 客户端 + + + + + + + + App X 证书 + + + + L4 + + 遥测 + + + + + + + + + + + + + + + + + + + + Istiod (控制平面 / + + 证书机构/注册机构) + + + + + + + + + + + + 1. 建立到 istiod: 15012 的安全连接 + + - 我是否能获取我的 DS 配置? + + + + 2. 这是您的工作负载 xDS 配置 + + + + 3. 给我 App A 所用的证书 + + + + 4. 您被允许代表 App A, + + 这是证书 + + + +