From 5ba44de41fc8ebf9958ae87e7ae70298337eb614 Mon Sep 17 00:00:00 2001
From: Reto Lehmann <retocode@icloud.com>
Date: Thu, 4 Apr 2024 08:20:49 +0200
Subject: [PATCH] Update docs about net-certmanager

---
 config/nav.yml                                |  2 +-
 .../encryption/cluster-local-domain-tls.md    | 19 ++++-
 ...d => configure-certmanager-integration.md} | 77 +++++++++++--------
 ...encryption-cluster-local-domain.drawio.svg |  2 +-
 .../encryption-external-domain.drawio.svg     |  2 +-
 .../serving/encryption/encryption-overview.md |  4 +-
 .../encryption-system-internal.drawio.svg     |  2 +-
 .../serving/encryption/external-domain-tls.md | 22 ++++--
 .../serving/encryption/system-internal-tls.md | 20 ++---
 9 files changed, 96 insertions(+), 54 deletions(-)
 rename docs/serving/encryption/{install-and-configure-net-certmanager.md => configure-certmanager-integration.md} (84%)

diff --git a/config/nav.yml b/config/nav.yml
index 9209bd8652e..6d0be562761 100644
--- a/config/nav.yml
+++ b/config/nav.yml
@@ -159,7 +159,7 @@ nav:
           - Configure the Defaults ConfigMap: serving/configuration/config-defaults.md
         - Serving encryption configuration:
           - Overview: serving/encryption/encryption-overview.md
-          - Install and configure net-certmanager: serving/encryption/install-and-configure-net-certmanager.md
+          - Configure cert-manager integration: serving/encryption/configure-certmanager-integration.md
           - Configure external domain encryption: serving/encryption/external-domain-tls.md
           - Configure cluster-local domain encryption: serving/encryption/cluster-local-domain-tls.md
           - Configure Knative system-internal encryption: serving/encryption/system-internal-tls.md
diff --git a/docs/serving/encryption/cluster-local-domain-tls.md b/docs/serving/encryption/cluster-local-domain-tls.md
index f982db33164..6564fbf77cf 100644
--- a/docs/serving/encryption/cluster-local-domain-tls.md
+++ b/docs/serving/encryption/cluster-local-domain-tls.md
@@ -12,11 +12,16 @@ You must meet the following requirements to enable secure HTTPS connections:
 !!! warning
     This feature is currently only supported with Kourier and Istio as a networking layer.
 
-## Enabling cluster-local-domain-tls
 
-First, you need to install and configure `cert-manager` and `net-certmanager`. Please refer to [Installing and configuring net-certmanager](./install-and-configure-net-certmanager.md) for details.
+## Installing and configuring cert-manager and integration
+
+First, you need to install and configure `cert-manager` and the Knative cert-manager integration.
+Please refer to [Configuring Knative cert-manager integration](./configure-certmanager-integration.md) for details.
+
+
+## Enabling cluster-local-domain-tls
 
-Then, update the [`config-network` ConfigMap](https://github.com/knative/serving/blob/main/config/core/configmaps/network.yaml) in the `knative-serving` namespace to enable `cluster-local-domain-tls`:
+To enable `cluster-local-domain-tls` update the [`config-network` ConfigMap](https://github.com/knative/serving/blob/main/config/core/configmaps/network.yaml) in the `knative-serving` namespace:
 
 1.  Run the following command to edit your `config-network` ConfigMap:
 
@@ -38,6 +43,12 @@ Then, update the [`config-network` ConfigMap](https://github.com/knative/serving
        ...
     ```
 
+1. Restart the Knative Serving controller to start the Knative cert-manager integration:
+
+    ```bash
+    kubectl rollout restart deploy/controller -n knative-serving
+    ```
+
 Congratulations! Knative is now configured to obtain and renew TLS certificates for cluster-local domains.
 
 
@@ -73,5 +84,5 @@ status:
     A quick note on trust, all clients that call the cluster-local domain of a Knative Service need to trust the Certificate Authority
     that signed the certificates. This is out of scope of Knative, but needs to be addressed to ensure a working system. Especially,
     when a Certificate Authority performs a rotation of the CA or the intermediate certificates. Find more information on
-    [Install and configure net-certmanager](./install-and-configure-net-certmanager.md#managing-trust-and-rotation-without-downtime).
+    [Configuring Knative cert-manager integration](./configure-certmanager-integration.md#managing-trust-and-rotation-without-downtime).
 
diff --git a/docs/serving/encryption/install-and-configure-net-certmanager.md b/docs/serving/encryption/configure-certmanager-integration.md
similarity index 84%
rename from docs/serving/encryption/install-and-configure-net-certmanager.md
rename to docs/serving/encryption/configure-certmanager-integration.md
index 62b9258f9d5..8d5198b2f97 100644
--- a/docs/serving/encryption/install-and-configure-net-certmanager.md
+++ b/docs/serving/encryption/configure-certmanager-integration.md
@@ -1,7 +1,7 @@
-# Installing and configuring net-certmanager
+# Configuring Knative cert-manager integration
 
 Knative Serving relies on a bridging-component to use cert-manager for automated certificate provisioning. 
-If you intend to use that feature, you need to install net-certmanager.
+If you intend to use that feature, you need to enable the Knative cert-manager integration.
 
 ## Prerequisites
 
@@ -10,35 +10,20 @@ The following must be installed on your Knative cluster:
 - [Knative Serving](../../install/yaml-install/serving/install-serving-with-yaml.md).
 - [`cert-manager`](../../install/installing-cert-manager.md) version `1.0.0` or higher.
 
-
-## Installing net-certmanager
-
-net-certmanager can be installed using the YAML installation method:
-
-```bash
-kubectl apply -f {{ artifact( repo="net-certmanager", file="release.yaml") }}
-```
-
 !!! warning
-    Per default, this installs a self-signed cert-manager `ClusterIssuer` for an easy quick-start. 
-    This issuer should **NOT BE USED IN PRODUCTION**! You can add a label filter to the command above 
-    to remove the issuer from the installation and configure your issuer manually: `--selector knative.dev/issuer-install!="true"`
-
-Installing net-certmanager using the Knative operator is not yet supported. 
-But the operator can be configured to install additional manifests from YAML,
-see [issue-950](https://github.com/knative/operator/issues/950#issuecomment-1032769274) for more info.
+    Make sure you have installed cert-manager. Otherwise, the Serving controller will not start up correctly.
 
 
 ## Issuer configuration
 
-net-certmanager defines three references to [cert-manager issuers](https://cert-manager.io/docs/configuration/issuers/) to configure different CAs
+The Knative cert-manager integration defines three references to [cert-manager issuers](https://cert-manager.io/docs/configuration/issuers/) to configure different CAs
 for the [three Knative Serving encryption features](./encryption-overview.md):
 
 * `issuerRef`: issuer for external-domain certificates used for ingress.
 * `clusterLocalIssuerRef`: issuer for cluster-local-domain certificates used for ingress.
 * `systemInternalIssuerRef`: issuer for certificates for system-internal-tls certificates used by Knative internal components.
 
-Per default, Knative uses a self-signed `ClusterIssuer` and net-certmanager references that `ClusterIssuer` for all three configurations.
+The following example uses a self-signed `ClusterIssuer` and the Knative cert-manager integration references that `ClusterIssuer` for all three configurations.
 As this **should not be used in production** (and does not support rotating the CA without downtime),
 you should think about which CA should be used for each use-case and how trust will be distributed to the clients calling the encrypted services. 
 For the Knative system components, Knative provides a way to specify a bundle of CAs that should be trusted (more on this below).
@@ -78,20 +63,52 @@ As this is also not possible via ACME protocol (DNS01/HTTP01), you need to confi
 
 ### Configuring issuers
 
-1. Create your `Issuer` and/or `ClusterIssuer`
+!!! warning
+    The self-signed cluster issuer should not be used in production, please see [Issuer configuration](#issuer-configuration) above for more information.
 
-1. Ensure that your namespace `Issuer` or `ClusterIssuer` exists:
+1. Create and apply the following self-signed `ClusterIssuer` to your cluster:
 
-    ```bash
-    kubectl get clusterissuer <cluster-issuer-name> -o yaml
+    ```yaml
+    apiVersion: cert-manager.io/v1
+    kind: ClusterIssuer
+    metadata:
+      name: selfsigned-cluster-issuer
+    spec:
+      selfSigned: {}
+    ---
+    apiVersion: cert-manager.io/v1
+    kind: ClusterIssuer
+    metadata:
+      name: knative-selfsigned-issuer
+    spec:
+      ca:
+        secretName: knative-selfsigned-ca
+    ---
+    apiVersion: cert-manager.io/v1
+    kind: Certificate
+    metadata:
+      name: knative-selfsigned-ca
+      namespace: cert-manager #  If you want to use it as a ClusterIssuer the secret must be in the cert-manager namespace.
+    spec:
+      secretName: knative-selfsigned-ca
+      commonName: knative.dev
+      usages:
+        - server auth
+      isCA: true
+      issuerRef:
+        kind: ClusterIssuer
+        name: selfsigned-cluster-issuer
     ```
+
+1. Ensure that the `ClusterIssuer` is ready:
+
     ```bash
-    kubectl get issuer -n <your-namespace> -o yaml
+    kubectl get clusterissuer selfsigned-cluster-issuer -o yaml
+    kubectl get clusterissuer knative-selfsigned-issuer -o yaml
     ```
-
     Result: The `Status.Conditions` should include `Ready=True`.
 
-1. Then reference it in the `config-certmanager` ConfigMap:
+1. Then reference the `ClusterIssuer` in the `config-certmanager` ConfigMap:
 
     ```bash
     kubectl edit configmap config-certmanager -n knative-serving
@@ -110,13 +127,13 @@ As this is also not possible via ACME protocol (DNS01/HTTP01), you need to confi
     data:
       issuerRef: |
         kind: ClusterIssuer
-        name: letsencrypt-http01-issuer
+        name: knative-selfsigned-issuer
       clusterLocalIssuerRef: |
         kind: ClusterIssuer
-        name: cluster-local-ca-issuer
+        name: knative-selfsigned-issuer
       systemInternalIssuerRef: |
         kind: ClusterIssuer
-        name: self-signed-issuer
+        name: knative-selfsigned-issuer
     ```
 
     Ensure that the file was updated successfully:
diff --git a/docs/serving/encryption/encryption-cluster-local-domain.drawio.svg b/docs/serving/encryption/encryption-cluster-local-domain.drawio.svg
index cf3ddf17f52..a88267b654f 100644
--- a/docs/serving/encryption/encryption-cluster-local-domain.drawio.svg
+++ b/docs/serving/encryption/encryption-cluster-local-domain.drawio.svg
@@ -1,4 +1,4 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!-- Do not edit this file with editors other than diagrams.net -->
 <!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="821px" height="562px" viewBox="-0.5 -0.5 821 562" content="&lt;mxfile host=&quot;drawio-plugin&quot; modified=&quot;2023-11-20T12:25:41.986Z&quot; agent=&quot;5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36&quot; etag=&quot;5EzVREkvuPglPAWlzzDe&quot; version=&quot;20.5.3&quot; type=&quot;embed&quot;&gt;&lt;diagram id=&quot;lqUjgnSfmldEnmkFUhgp&quot; name=&quot;Page-1&quot;&gt;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&lt;/diagram&gt;&lt;/mxfile&gt;" style="background-color: rgb(255, 255, 255);"><defs/><g><rect x="220" y="0" width="600" height="530" fill="none" stroke="#666666" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 598px; height: 1px; padding-top: 265px; margin-left: 221px;"><div data-drawio-colors="color: #333333; " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(51, 51, 51); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><font style="font-size: 10px;">Cluster</font></div></div></div></foreignObject><text x="520" y="269" fill="#333333" font-family="Helvetica" font-size="12px" text-anchor="middle">Cluster...</text></switch></g><rect x="230" y="163.5" width="270" height="115" fill="none" stroke="rgb(0, 0, 0)" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 268px; height: 1px; padding-top: 221px; margin-left: 231px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font style="font-size: 10px;"><br /><br /><br /><br /><br /><br />Namespace of ingress-controller<br /></font></div></div></div></foreignObject><text x="365" y="225" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Namespace of ingress-controller...</text></switch></g><rect x="575" y="163.5" width="235" height="306.5" fill="none" stroke="rgb(0, 0, 0)" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 233px; height: 1px; padding-top: 317px; margin-left: 576px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><font style="font-size: 10px;">Namespace: user-2</font></div></div></div></foreignObject><text x="693" y="320" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Namespace: user-2...</text></switch></g><rect x="230" y="290" width="270" height="220" fill="none" stroke="rgb(0, 0, 0)" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 268px; height: 1px; padding-top: 400px; margin-left: 231px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><font style="font-size: 10px;">Namespace: knative-serving</font></div></div></div></foreignObject><text x="365" y="404" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Namespace: knative-serving...</text></switch></g><rect x="605" y="180" width="175" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 173px; height: 1px; padding-top: 210px; margin-left: 606px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Kservice<br /></b>with Queue-Proxy</div></div></div></foreignObject><text x="693" y="214" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Kservice...</text></switch></g><rect x="280" y="180" width="180" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 178px; height: 1px; padding-top: 210px; margin-left: 281px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Ingress Controller</b><br />(Kourier, Contour, Istio)</div></div></div></foreignObject><text x="370" y="214" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Ingress Controller...</text></switch></g><path d="M 627.93 69.76 L 627.9 20 L 87.5 20 L 87.5 373.63" fill="none" stroke="#b85450" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 87.5 378.88 L 84 371.88 L 87.5 373.63 L 91 371.88 Z" fill="#b85450" stroke="#b85450" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 30px; margin-left: 593px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">trusts the CA</div></div></div></foreignObject><text x="593" y="33" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">trusts the CA</text></switch></g><path d="M 460 340 L 532.5 340 L 532.5 357.5 L 598.63 357.5" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 603.88 357.5 L 596.88 361 L 598.63 357.5 L 596.88 354 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 358px; margin-left: 557px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">create</div></div></div></foreignObject><text x="557" y="361" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">create</text></switch></g><rect x="280" y="310" width="180" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 178px; height: 1px; padding-top: 340px; margin-left: 281px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Serving Controller</b></div></div></div></foreignObject><text x="370" y="344" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Serving Controller</text></switch></g><path d="M 280 410 L 181.37 410" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 176.12 410 L 183.12 406.5 L 181.37 410 L 183.12 413.5 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 410px; margin-left: 227px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">Get Certificate</div></div></div></foreignObject><text x="227" y="413" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">Get Certificate</text></switch></g><path d="M 460 425 L 794 425 L 794 291 L 786.37 291" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 781.12 291 L 788.12 287.5 L 786.37 291 L 788.12 294.5 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 435px; margin-left: 528px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 10px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">populate</div></div></div></foreignObject><text x="528" y="438" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="10px" text-anchor="middle">populate</text></switch></g><rect x="280" y="380" width="180" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 178px; height: 1px; padding-top: 410px; margin-left: 281px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>net-certmanager<br />(via installed cert-manager)</b></div></div></div></foreignObject><text x="370" y="414" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">net-certmanager...</text></switch></g><path d="M 605 392.5 L 540 392.5 L 540 395 L 466.37 395" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 461.12 395 L 468.12 391.5 L 466.37 395 L 468.12 398.5 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 383px; margin-left: 561px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">read</div></div></div></foreignObject><text x="561" y="386" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">read</text></switch></g><rect x="605" y="340" width="175" height="70" fill="#ffe6cc" stroke="#d79b00" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 173px; height: 1px; padding-top: 375px; margin-left: 606px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Knative Certificate<br /></b>visibility: cluster-local<br />dnsName: myapp.user-2.svc.cluster.local<br /></div></div></div></foreignObject><text x="693" y="379" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Knative Certificate...</text></switch></g><path d="M 605 291 L 550 291 L 550 225 L 466.37 225" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 461.12 225 L 468.12 221.5 L 466.37 225 L 468.12 228.5 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 262px; margin-left: 550px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">read</div></div></div></foreignObject><text x="550" y="265" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">read</text></switch></g><rect x="605" y="261" width="175" height="60" fill="#f8cecc" stroke="#b85450" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 173px; height: 1px; padding-top: 291px; margin-left: 606px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Secret</b><br />name: &lt;id&gt;</div></div></div></foreignObject><text x="693" y="295" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Secret...</text></switch></g><path d="M 460 210 L 520 210 L 598.63 210" fill="none" stroke="#9673a6" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 603.88 210 L 596.88 213.5 L 598.63 210 L 596.88 206.5 Z" fill="#9673a6" stroke="#9673a6" stroke-miterlimit="10" pointer-events="all"/><path d="M 410 127.1 L 483.46 181.46" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 330 52.5 L 394 52.5 L 410 68.5 L 410 142.5 L 330 142.5 L 330 52.5 Z" fill="#fff2cc" stroke="#d6b656" stroke-miterlimit="10" pointer-events="all"/><path d="M 394 52.5 L 394 68.5 L 410 68.5 Z" fill-opacity="0.05" fill="#000000" stroke="none" pointer-events="all"/><path d="M 394 52.5 L 394 68.5 L 410 68.5" fill="none" stroke="#d6b656" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 78px; height: 1px; padding-top: 98px; margin-left: 331px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">Uses SNI to return the matching certificate</div></div></div></foreignObject><text x="370" y="101" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Uses SNI to r...</text></switch></g><rect x="0" y="380" width="175" height="60" fill="#f5f5f5" stroke="#666666" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 173px; height: 1px; padding-top: 410px; margin-left: 1px;"><div data-drawio-colors="color: #333333; " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(51, 51, 51); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>External CA<br /></b>(e.g. Company CA, Vault, allowed to sign *.cluster.local)</div></div></div></foreignObject><text x="88" y="414" fill="#333333" font-family="Helvetica" font-size="12px" text-anchor="middle">External CA...</text></switch></g><rect x="575" y="40" width="235" height="115" fill="none" stroke="rgb(0, 0, 0)" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 233px; height: 1px; padding-top: 98px; margin-left: 576px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font style="font-size: 10px;"><font style="font-size: 10px;">Namespace: user-1<br /></font><br /><br /><br /><br /><br /><br /></font></div></div></div></foreignObject><text x="693" y="101" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Namespace: user-1...</text></switch></g><rect x="605" y="70" width="175" height="60" fill="#f5f5f5" stroke="#666666" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 173px; height: 1px; padding-top: 100px; margin-left: 606px;"><div data-drawio-colors="color: #333333; " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(51, 51, 51); line-height: 1.2; pointer-events: all; font-weight: bold; white-space: normal; overflow-wrap: normal;">User application<br style="font-size: 12px;" /><span style="font-weight: normal; font-size: 12px;">(Knative or non-Knative workload)</span></div></div></div></foreignObject><text x="693" y="104" fill="#333333" font-family="Helvetica" font-size="12px" text-anchor="middle" font-weight="bold">User application...</text></switch></g><path d="M 605 100 L 487 100 L 487 173.63" fill="none" stroke="#9673a6" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 487 178.88 L 483.5 171.88 L 487 173.63 L 490.5 171.88 Z" fill="#9673a6" stroke="#9673a6" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 91px; margin-left: 509px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">myapp.user-2.svc.cluster.local</div></div></div></foreignObject><text x="509" y="94" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">myapp.user-2.svc.cluster.local</text></switch></g><path d="M 482 185 L 480 185 L 460 185" fill="none" stroke="#6c8ebf" stroke-miterlimit="10" pointer-events="stroke"/><ellipse cx="487" cy="185" rx="5" ry="5" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><rect x="220" y="540.29" width="120" height="20" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 118px; height: 1px; padding-top: 550px; margin-left: 221px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">Knative Component</div></div></div></foreignObject><text x="280" y="554" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Knative Component</text></switch></g><rect x="340" y="540.29" width="120" height="20" fill="#f8cecc" stroke="#b85450" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 118px; height: 1px; padding-top: 550px; margin-left: 341px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">Kubernetes Secret</div></div></div></foreignObject><text x="400" y="554" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Kubernetes Secret</text></switch></g><rect x="460" y="540.29" width="140" height="20" fill="#ffe6cc" stroke="#d79b00" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 138px; height: 1px; padding-top: 550px; margin-left: 461px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">Knative Certificate CR</div></div></div></foreignObject><text x="530" y="554" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Knative Certificate CR</text></switch></g><rect x="605" y="540.29" width="130" height="20" fill="none" stroke="none" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 128px; height: 1px; padding-top: 550px; margin-left: 606px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font style="font-size: 10px;">Traffic flow</font></div></div></div></foreignObject><text x="670" y="554" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Traffic flow</text></switch></g><path d="M 610 540.01 L 668 540 L 719.63 540.26" fill="none" stroke="#9673a6" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 724.88 540.28 L 717.86 543.75 L 719.63 540.26 L 717.9 536.75 Z" fill="#9673a6" stroke="#9673a6" stroke-miterlimit="10" pointer-events="all"/></g><switch><g requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"/><a transform="translate(0,-5)" xlink:href="https://www.diagrams.net/doc/faq/svg-export-text-problems" target="_blank"><text text-anchor="middle" font-size="10px" x="50%" y="100%">Text is not SVG - cannot display</text></a></switch></svg>
\ No newline at end of file
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="821px" height="562px" viewBox="-0.5 -0.5 821 562" content="&lt;mxfile host=&quot;drawio-plugin&quot; modified=&quot;2024-04-04T06:40:54.234Z&quot; agent=&quot;5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36&quot; etag=&quot;vrMS5-qw5Fg0ykjK-ho3&quot; version=&quot;20.5.3&quot; type=&quot;embed&quot;&gt;&lt;diagram id=&quot;lqUjgnSfmldEnmkFUhgp&quot; name=&quot;Page-1&quot;&gt;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&lt;/diagram&gt;&lt;/mxfile&gt;" style="background-color: rgb(255, 255, 255);"><defs/><g><rect x="220" y="0" width="600" height="530" fill="none" stroke="#666666" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 598px; height: 1px; padding-top: 265px; margin-left: 221px;"><div data-drawio-colors="color: #333333; " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(51, 51, 51); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><font style="font-size: 10px;">Cluster</font></div></div></div></foreignObject><text x="520" y="269" fill="#333333" font-family="Helvetica" font-size="12px" text-anchor="middle">Cluster...</text></switch></g><rect x="230" y="163.5" width="270" height="115" fill="none" stroke="rgb(0, 0, 0)" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 268px; height: 1px; padding-top: 221px; margin-left: 231px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font style="font-size: 10px;"><br /><br /><br /><br /><br /><br />Namespace of ingress-controller<br /></font></div></div></div></foreignObject><text x="365" y="225" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Namespace of ingress-controller...</text></switch></g><rect x="575" y="163.5" width="235" height="306.5" fill="none" stroke="rgb(0, 0, 0)" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 233px; height: 1px; padding-top: 317px; margin-left: 576px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><font style="font-size: 10px;">Namespace: user-2</font></div></div></div></foreignObject><text x="693" y="320" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Namespace: user-2...</text></switch></g><rect x="230" y="290" width="270" height="220" fill="none" stroke="rgb(0, 0, 0)" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 268px; height: 1px; padding-top: 400px; margin-left: 231px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><font style="font-size: 10px;">Namespace: knative-serving</font></div></div></div></foreignObject><text x="365" y="404" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Namespace: knative-serving...</text></switch></g><rect x="605" y="180" width="175" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 173px; height: 1px; padding-top: 210px; margin-left: 606px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Kservice<br /></b>with Queue-Proxy</div></div></div></foreignObject><text x="693" y="214" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Kservice...</text></switch></g><rect x="280" y="180" width="180" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 178px; height: 1px; padding-top: 210px; margin-left: 281px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Ingress Controller</b><br />(Kourier, Contour, Istio)</div></div></div></foreignObject><text x="370" y="214" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Ingress Controller...</text></switch></g><path d="M 627.93 69.76 L 627.9 20 L 87.5 20 L 87.5 373.63" fill="none" stroke="#b85450" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 87.5 378.88 L 84 371.88 L 87.5 373.63 L 91 371.88 Z" fill="#b85450" stroke="#b85450" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 30px; margin-left: 593px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">trusts the CA</div></div></div></foreignObject><text x="593" y="33" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">trusts the CA</text></switch></g><path d="M 460 340 L 532.5 340 L 532.5 357.5 L 598.63 357.5" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 603.88 357.5 L 596.88 361 L 598.63 357.5 L 596.88 354 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 358px; margin-left: 557px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">create</div></div></div></foreignObject><text x="557" y="361" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">create</text></switch></g><rect x="280" y="310" width="180" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 178px; height: 1px; padding-top: 340px; margin-left: 281px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Serving Controller</b></div></div></div></foreignObject><text x="370" y="344" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Serving Controller</text></switch></g><path d="M 280 410 L 181.37 410" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 176.12 410 L 183.12 406.5 L 181.37 410 L 183.12 413.5 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 410px; margin-left: 227px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">Get Certificate</div></div></div></foreignObject><text x="227" y="413" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">Get Certificate</text></switch></g><path d="M 460 425 L 794 425 L 794 291 L 786.37 291" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 781.12 291 L 788.12 287.5 L 786.37 291 L 788.12 294.5 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 435px; margin-left: 528px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 10px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">populate</div></div></div></foreignObject><text x="528" y="438" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="10px" text-anchor="middle">populate</text></switch></g><rect x="280" y="380" width="180" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 178px; height: 1px; padding-top: 410px; margin-left: 281px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>via cert-manager</b></div></div></div></foreignObject><text x="370" y="414" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">via cert-manager</text></switch></g><path d="M 605 392.5 L 540 392.5 L 540 395 L 466.37 395" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 461.12 395 L 468.12 391.5 L 466.37 395 L 468.12 398.5 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 383px; margin-left: 561px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">read</div></div></div></foreignObject><text x="561" y="386" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">read</text></switch></g><rect x="605" y="340" width="175" height="70" fill="#ffe6cc" stroke="#d79b00" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 173px; height: 1px; padding-top: 375px; margin-left: 606px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Knative Certificate<br /></b>visibility: cluster-local<br />dnsName: myapp.user-2.svc.cluster.local<br /></div></div></div></foreignObject><text x="693" y="379" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Knative Certificate...</text></switch></g><path d="M 605 291 L 550 291 L 550 225 L 466.37 225" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 461.12 225 L 468.12 221.5 L 466.37 225 L 468.12 228.5 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 262px; margin-left: 550px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">read</div></div></div></foreignObject><text x="550" y="265" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">read</text></switch></g><rect x="605" y="261" width="175" height="60" fill="#f8cecc" stroke="#b85450" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 173px; height: 1px; padding-top: 291px; margin-left: 606px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Secret</b><br />name: &lt;id&gt;</div></div></div></foreignObject><text x="693" y="295" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Secret...</text></switch></g><path d="M 460 210 L 520 210 L 598.63 210" fill="none" stroke="#9673a6" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 603.88 210 L 596.88 213.5 L 598.63 210 L 596.88 206.5 Z" fill="#9673a6" stroke="#9673a6" stroke-miterlimit="10" pointer-events="all"/><path d="M 410 127.1 L 483.46 181.46" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 330 52.5 L 394 52.5 L 410 68.5 L 410 142.5 L 330 142.5 L 330 52.5 Z" fill="#fff2cc" stroke="#d6b656" stroke-miterlimit="10" pointer-events="all"/><path d="M 394 52.5 L 394 68.5 L 410 68.5 Z" fill-opacity="0.05" fill="#000000" stroke="none" pointer-events="all"/><path d="M 394 52.5 L 394 68.5 L 410 68.5" fill="none" stroke="#d6b656" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 78px; height: 1px; padding-top: 98px; margin-left: 331px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">Uses SNI to return the matching certificate</div></div></div></foreignObject><text x="370" y="101" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Uses SNI to r...</text></switch></g><rect x="0" y="380" width="175" height="60" fill="#f5f5f5" stroke="#666666" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 173px; height: 1px; padding-top: 410px; margin-left: 1px;"><div data-drawio-colors="color: #333333; " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(51, 51, 51); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>External CA<br /></b>(e.g. Company CA, Vault, allowed to sign *.cluster.local)</div></div></div></foreignObject><text x="88" y="414" fill="#333333" font-family="Helvetica" font-size="12px" text-anchor="middle">External CA...</text></switch></g><rect x="575" y="40" width="235" height="115" fill="none" stroke="rgb(0, 0, 0)" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 233px; height: 1px; padding-top: 98px; margin-left: 576px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font style="font-size: 10px;"><font style="font-size: 10px;">Namespace: user-1<br /></font><br /><br /><br /><br /><br /><br /></font></div></div></div></foreignObject><text x="693" y="101" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Namespace: user-1...</text></switch></g><rect x="605" y="70" width="175" height="60" fill="#f5f5f5" stroke="#666666" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 173px; height: 1px; padding-top: 100px; margin-left: 606px;"><div data-drawio-colors="color: #333333; " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(51, 51, 51); line-height: 1.2; pointer-events: all; font-weight: bold; white-space: normal; overflow-wrap: normal;">User application<br style="font-size: 12px;" /><span style="font-weight: normal; font-size: 12px;">(Knative or non-Knative workload)</span></div></div></div></foreignObject><text x="693" y="104" fill="#333333" font-family="Helvetica" font-size="12px" text-anchor="middle" font-weight="bold">User application...</text></switch></g><path d="M 605 100 L 487 100 L 487 173.63" fill="none" stroke="#9673a6" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 487 178.88 L 483.5 171.88 L 487 173.63 L 490.5 171.88 Z" fill="#9673a6" stroke="#9673a6" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 91px; margin-left: 509px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">myapp.user-2.svc.cluster.local</div></div></div></foreignObject><text x="509" y="94" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">myapp.user-2.svc.cluster.local</text></switch></g><path d="M 482 185 L 480 185 L 460 185" fill="none" stroke="#6c8ebf" stroke-miterlimit="10" pointer-events="stroke"/><ellipse cx="487" cy="185" rx="5" ry="5" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><rect x="220" y="540.29" width="120" height="20" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 118px; height: 1px; padding-top: 550px; margin-left: 221px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">Knative Component</div></div></div></foreignObject><text x="280" y="554" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Knative Component</text></switch></g><rect x="340" y="540.29" width="120" height="20" fill="#f8cecc" stroke="#b85450" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 118px; height: 1px; padding-top: 550px; margin-left: 341px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">Kubernetes Secret</div></div></div></foreignObject><text x="400" y="554" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Kubernetes Secret</text></switch></g><rect x="460" y="540.29" width="140" height="20" fill="#ffe6cc" stroke="#d79b00" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 138px; height: 1px; padding-top: 550px; margin-left: 461px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">Knative Certificate CR</div></div></div></foreignObject><text x="530" y="554" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Knative Certificate CR</text></switch></g><rect x="605" y="540.29" width="130" height="20" fill="none" stroke="none" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 128px; height: 1px; padding-top: 550px; margin-left: 606px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font style="font-size: 10px;">Traffic flow</font></div></div></div></foreignObject><text x="670" y="554" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Traffic flow</text></switch></g><path d="M 610 540.01 L 668 540 L 719.63 540.26" fill="none" stroke="#9673a6" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 724.88 540.28 L 717.86 543.75 L 719.63 540.26 L 717.9 536.75 Z" fill="#9673a6" stroke="#9673a6" stroke-miterlimit="10" pointer-events="all"/></g><switch><g requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"/><a transform="translate(0,-5)" xlink:href="https://www.diagrams.net/doc/faq/svg-export-text-problems" target="_blank"><text text-anchor="middle" font-size="10px" x="50%" y="100%">Text is not SVG - cannot display</text></a></switch></svg>
\ No newline at end of file
diff --git a/docs/serving/encryption/encryption-external-domain.drawio.svg b/docs/serving/encryption/encryption-external-domain.drawio.svg
index ce9d2f726e1..9c7f2c7715c 100644
--- a/docs/serving/encryption/encryption-external-domain.drawio.svg
+++ b/docs/serving/encryption/encryption-external-domain.drawio.svg
@@ -1,4 +1,4 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!-- Do not edit this file with editors other than diagrams.net -->
 <!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="864px" height="501px" viewBox="-0.5 -0.5 864 501" content="&lt;mxfile host=&quot;drawio-plugin&quot; modified=&quot;2023-11-16T11:47:53.482Z&quot; agent=&quot;5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36&quot; etag=&quot;vW1iGH0T-O3AK6KiytsJ&quot; version=&quot;20.5.3&quot; type=&quot;embed&quot;&gt;&lt;diagram id=&quot;lqUjgnSfmldEnmkFUhgp&quot; name=&quot;Page-1&quot;&gt;7Vtbc9o4FP41zLYPML5gA4+EJN1Ob9nNdrZ9FLYM3hjLa8sJ7K/fI1vCFwlsgoEkUzqTWkcXi3P5dC6iZ85W6w8xipZfiIuDnqG565553TMMQx8O4T9G2eQU2xrnhEXsuzlJLwj3/n+YEzVOTX0XJ5WBlJCA+lGV6JAwxA6t0FAck6fqMI8E1bdGaIElwr2DApn6t+/SZU4dW1pB/x37i6V4s67xnjlyHhYxSUP+vp5h3mafvHuFxFp8fLJELnkqkcybnjmLCaH502o9wwHjrWBbPu92R+923zEOaZsJRj7hEQUpFju2A5h6NY/hacGeflFeHsUjIF9QH7rhKmv/mxLR0U8yg5rCAF2L1vk03i8WmgVpQnEs1gMNyZcUrzEqqxuZSmOmNBp0Py19iu8j5LDeJ4AAoC3pKoCWzvbgB8GMBCSGdkhCzLclSGAT+QfoCY3JAy712NkHelyULLMX6rxxhyhsOMwo8MW2uywrO9f/RxxTvC6RuPJ/wGSFabyBIbx3xO2Q45Q+5O2nwuptYdvLksWbNicijjSL7dKFtcEDNzi18Zk7je9o8Z5TJ7+iFU4yZTA04rHvFy5inCR9QGcQbxAUaiYvc2rFO48ajWtqZJkDS1KkrbItK0eHdbwiDX+h+GvH48KIsnFpguP+Vopvw0iGhtXGSkxLAbeaPejATqw3bidda+FDiKj/iPugjI8A6m9LHWuYvW03Iva4g6N/vFsTBVs/ZVxnp+qes3M7+smHTRvaHylOcf8uJutNd2IBt8xFeOw5SofNGeO51xFCWDWEGMky0UcKfOjCGxOx5z6ZfMw9Gxg1k3ybsjRkmb37RNLYZ6NnfDa088bHhPrk/SsUl25qzeIaK0yoE3HpkrhWGxRF/fzoHOA1WkUBHjhkJbEWuxDt8yaJ6ZIsSIiCm4J6VWV+MeYzIRFn+T+Y0g1PXaCUkqpAJMa7o8lcY4sBv+PND75y1vjJGnC+8eb1utx5veGtmog9D9uOs0+QCWiYIxIaRk6jKF5gMYy7jYwbe8Ud4yA7Byqrq2THp94RPzuHhJpoVTWZ1KSf74lPqinAdhftAipb0gkaQ5zLDJYuFUg6m15CNwoNKIT+syJztQYkwCk6Zemt4qzMaLc+Y0k2psXZWVeksYMdJVbMx9bQ0o5RMbNzFWsND4akCtMoCnwHXkNCmP09qYalR3hNeM04jIIsSylUTXNEhqWmYMkSRewxXQVThzJeXzHIhZ0Fn9EcB3ck8bM9mtdzQinAVzFgGvgL1kFJDf9JSgM/BOGJfGgdMVzsoXTrJHLV1PcKt/1B0NeN5pPAPNVBYF7Whg9DcRy6NQsGSsl+OzzIK8Y5VOC/djHjVCUs6jIMAj9KcLPrg5IoV3nPXzOJXsgXqh1y+kQObXVVNNGBBRgjiZ1OjBHFL8kwjCbLeMbJZbF/SsmKLHIr4xCJ2LJxGHZL4+Dy1wZDTUQvz/WXxBDieQk+1hfak13ehin3Iq5vDGdefWyy9TrPEZuYcqLpAxOoNmPnuMeckMvapt476NBq43gebpvHpHkq5mu9JMfTlFM7EYnS4JWJvA0a1xzJ02jJs1XAmByG4H1tYNviKD0MwuFLo01pQMQAPVEgPH+VLe5HcHAa1qv0DeONsV5TyXwHJz1P9iTPxTkRYtp3AOJWKEQLVdXv3aOP2Joh6AUcNi4Lk2B8n094/0YPH/OciTFFbhmcQfc1gQ9e+/RH6TmfNbJ4s5jFGi/Af7QV6GMdjD6maRrdoo8MKN1Cgpxuk6sYeQmp7vu0KWm4YcLqUXnyJc/tyhNbZHuPwYttlnV3PrcDvKjXPUzFNZST1T1Mue5xMbxQ2v0FzH4XcI2akKsdXkxkvGidjCnwwtA0/Tl4IbkXpl6LlUQevSFDf6jbM6zlSGpuTPN4flfmrG7PpBnj7rETsxe1qQOGW0QDCmAWkLIR8D7R7t7rOSbF/3wUMyz9jCgmlwMvgWDnK/sJrBS42QYrW6GTAIMyOo1bgtOxlUIJiNqVCqWF+vJK+kAzxtZIH2Z/zdptopwBndQgJw2me8aC4YmC+KYaRis1MxVJ1+4r0q3hQ86Wfk8wqxvff/3Y43U9APkUmCcKfCtEnWWePnX25PVEvS8kFDcjd/EDgm95SW8rvfjhG8zyaSbcgWapsMEzdjir9ty2mGOTcFHvjW2eX/UwZb9VFebWbwA8S2J7Lr2Kw/amKMxOZ19uWBAybRd7vMODxQDGf8b0N6YFOHTiTUS7vaXTwhHddW++A9n19YkxqMUd57xvNZTjjlKwSFYRQAtH49eV/an9psDSFUw1FFZhdMFU2Q36lM7BCDDN0Yy7qq/OudQnl+SqsU9Vy9ivzf7slrlnyT/UA0Alc4enYu5uID/6PvNfMfJANDDEC8BfYdu9YkL6Cpu6n8JfdtHebXuvGbhJ97n74rdO8o1mxO/tOCAjXL7xIy70rHzXDXa5B1UF6kDe9UhNKW/VfZ1O5C3fVpA4fdFI7SwR16lDKWtkq0V8aCg1tGvYoE0GI6O61o7o6dD8kKWPlXvetbVd31GZH2oO5aBZ/PA2H178utm8+R8=&lt;/diagram&gt;&lt;/mxfile&gt;" style="background-color: rgb(255, 255, 255);"><defs/><g><rect x="263" y="110" width="600" height="360" fill="none" stroke="#666666" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 598px; height: 1px; padding-top: 290px; margin-left: 264px;"><div data-drawio-colors="color: #333333; " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(51, 51, 51); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><font style="font-size: 10px;">Cluster</font></div></div></div></foreignObject><text x="563" y="294" fill="#333333" font-family="Helvetica" font-size="12px" text-anchor="middle">Cluster...</text></switch></g><rect x="273" y="123.5" width="270" height="115" fill="none" stroke="rgb(0, 0, 0)" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 268px; height: 1px; padding-top: 181px; margin-left: 274px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font style="font-size: 10px;"><br /><br /><br /><br /><br /><br />Namespace of ingress-controller<br /></font></div></div></div></foreignObject><text x="408" y="185" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Namespace of ingress-controller...</text></switch></g><rect x="618" y="123.5" width="235" height="306.5" fill="none" stroke="rgb(0, 0, 0)" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 233px; height: 1px; padding-top: 277px; margin-left: 619px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><font style="font-size: 10px;">Namespace: user-2</font></div></div></div></foreignObject><text x="736" y="280" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Namespace: user-2...</text></switch></g><rect x="273" y="250" width="270" height="180" fill="none" stroke="rgb(0, 0, 0)" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 268px; height: 1px; padding-top: 340px; margin-left: 274px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><font style="font-size: 10px;">Namespace: knative-serving</font></div></div></div></foreignObject><text x="408" y="344" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Namespace: knative-serving...</text></switch></g><rect x="648" y="140" width="175" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 173px; height: 1px; padding-top: 170px; margin-left: 649px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Kservice<br /></b>with Queue-Proxy</div></div></div></foreignObject><text x="736" y="174" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Kservice...</text></switch></g><rect x="323" y="140" width="180" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 178px; height: 1px; padding-top: 170px; margin-left: 324px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Ingress Controller</b><br />(Kourier, Contour, Istio)</div></div></div></foreignObject><text x="413" y="174" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Ingress Controller...</text></switch></g><path d="M 103 170 L 286.63 170" fill="none" stroke="#d79b00" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 291.88 170 L 284.88 173.5 L 286.63 170 L 284.88 166.5 Z" fill="#d79b00" stroke="#d79b00" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 170px; margin-left: 198px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">myapp-user-2.example.com</div></div></div></foreignObject><text x="198" y="173" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">myapp-user-2.example.com</text></switch></g><path d="M 88 200 L 88 333.63" fill="none" stroke="#b85450" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 88 338.88 L 84.5 331.88 L 88 333.63 L 91.5 331.88 Z" fill="#b85450" stroke="#b85450" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 270px; margin-left: 88px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">trusts the<br />CA</div></div></div></foreignObject><text x="88" y="274" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">trusts the...</text></switch></g><ellipse cx="88" cy="147.5" rx="7.5" ry="7.5" fill="rgb(255, 255, 255)" stroke="rgb(0, 0, 0)" pointer-events="all"/><path d="M 88 155 L 88 180 M 88 160 L 73 160 M 88 160 L 103 160 M 88 180 L 73 200 M 88 180 L 103 200" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe flex-start; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 207px; margin-left: 88px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 10px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: nowrap;">Application/User<br style="font-size: 10px;" />external to the cluster</div></div></div></foreignObject><text x="88" y="217" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="10px" text-anchor="middle">Applic...</text></switch></g><path d="M 303 170 L 323 170 L 303 170 L 323 170" fill="none" stroke="#6c8ebf" stroke-miterlimit="10" pointer-events="stroke"/><ellipse cx="298" cy="170" rx="5" ry="5" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><path d="M 503 290 L 575.51 290 L 575.51 325.03 L 641.63 325" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 646.88 325 L 639.88 328.5 L 641.63 325 L 639.88 321.5 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 325px; margin-left: 594px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">create</div></div></div></foreignObject><text x="594" y="328" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">create</text></switch></g><rect x="323" y="260" width="180" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 178px; height: 1px; padding-top: 290px; margin-left: 324px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Serving Controller</b></div></div></div></foreignObject><text x="413" y="294" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Serving Controller</text></switch></g><path d="M 323 370 L 181.87 370" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 176.62 370 L 183.62 366.5 L 181.87 370 L 183.62 373.5 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 370px; margin-left: 249px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">Get Certificate</div></div></div></foreignObject><text x="249" y="373" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">Get Certificate</text></switch></g><path d="M 503 390 L 837 390 L 837 251.03 L 829.37 251.01" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 824.12 251 L 831.13 247.52 L 829.37 251.01 L 831.11 254.52 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 390px; margin-left: 585px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 10px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">populate</div></div></div></foreignObject><text x="585" y="393" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="10px" text-anchor="middle">populate</text></switch></g><rect x="323" y="340" width="180" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 178px; height: 1px; padding-top: 370px; margin-left: 324px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>net-certmanager<br />(via installed cert-manager)</b></div></div></div></foreignObject><text x="413" y="374" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">net-certmanager...</text></switch></g><path d="M 648 355 L 575.51 355.03 L 575.51 370 L 509.37 370" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 504.12 370 L 511.12 366.5 L 509.37 370 L 511.12 373.5 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 355px; margin-left: 595px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">read</div></div></div></foreignObject><text x="595" y="358" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">read</text></switch></g><rect x="648" y="310" width="175" height="60" fill="#ffe6cc" stroke="#d79b00" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 173px; height: 1px; padding-top: 340px; margin-left: 649px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Knative Certificate<br /></b>dnsName: myapp-<br />user-2.example.com</div></div></div></foreignObject><text x="736" y="344" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Knative Certificate...</text></switch></g><path d="M 648 251 L 593 251.03 L 593 185.03 L 509.37 185" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 504.12 185 L 511.12 181.5 L 509.37 185 L 511.12 188.5 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 221px; margin-left: 593px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">read</div></div></div></foreignObject><text x="593" y="225" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">read</text></switch></g><rect x="648" y="221" width="175" height="60" fill="#f8cecc" stroke="#b85450" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 173px; height: 1px; padding-top: 251px; margin-left: 649px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Secret</b><br />name: &lt;id&gt;</div></div></div></foreignObject><text x="736" y="255" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Secret...</text></switch></g><path d="M 503 170 L 641.63 170" fill="none" stroke="#d79b00" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 646.88 170 L 639.88 173.5 L 641.63 170 L 639.88 166.5 Z" fill="#d79b00" stroke="#d79b00" stroke-miterlimit="10" pointer-events="all"/><path d="M 319.88 90 L 298 165" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 293 0 L 357 0 L 373 16 L 373 90 L 293 90 L 293 0 Z" fill="#fff2cc" stroke="#d6b656" stroke-miterlimit="10" pointer-events="all"/><path d="M 357 0 L 357 16 L 373 16 Z" fill-opacity="0.05" fill="#000000" stroke="none" pointer-events="all"/><path d="M 357 0 L 357 16 L 373 16" fill="none" stroke="#d6b656" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 78px; height: 1px; padding-top: 45px; margin-left: 294px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">Uses SNI to return the matching certificate</div></div></div></foreignObject><text x="333" y="49" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Uses SNI to r...</text></switch></g><rect x="0.5" y="340" width="175" height="60" fill="#f5f5f5" stroke="#666666" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 173px; height: 1px; padding-top: 370px; margin-left: 2px;"><div data-drawio-colors="color: #333333; " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(51, 51, 51); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>External ACME CA<br /></b>(e.g. Let's encrypt)</div></div></div></foreignObject><text x="88" y="374" fill="#333333" font-family="Helvetica" font-size="12px" text-anchor="middle">External ACME CA...</text></switch></g><rect x="263" y="480" width="120" height="20" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 118px; height: 1px; padding-top: 490px; margin-left: 264px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">Knative Component</div></div></div></foreignObject><text x="323" y="494" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Knative Component</text></switch></g><rect x="383" y="480" width="120" height="20" fill="#f8cecc" stroke="#b85450" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 118px; height: 1px; padding-top: 490px; margin-left: 384px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">Kubernetes Secret</div></div></div></foreignObject><text x="443" y="494" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Kubernetes Secret</text></switch></g><rect x="503" y="480" width="140" height="20" fill="#ffe6cc" stroke="#d79b00" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 138px; height: 1px; padding-top: 490px; margin-left: 504px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">Knative Certificate CR</div></div></div></foreignObject><text x="573" y="494" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Knative Certificate CR</text></switch></g><rect x="648" y="480" width="130" height="20" fill="none" stroke="none" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 128px; height: 1px; padding-top: 490px; margin-left: 649px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font style="font-size: 10px;">Traffic flow + CN/SAN used</font></div></div></div></foreignObject><text x="713" y="494" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Traffic flow + CN/SAN...</text></switch></g><path d="M 653 479.72 L 711 479.71 L 762.63 479.97" fill="none" stroke="#d79b00" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 767.88 479.99 L 760.86 483.46 L 762.63 479.97 L 760.9 476.46 Z" fill="#d79b00" stroke="#d79b00" stroke-miterlimit="10" pointer-events="all"/></g><switch><g requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"/><a transform="translate(0,-5)" xlink:href="https://www.diagrams.net/doc/faq/svg-export-text-problems" target="_blank"><text text-anchor="middle" font-size="10px" x="50%" y="100%">Text is not SVG - cannot display</text></a></switch></svg>
\ No newline at end of file
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="864px" height="501px" viewBox="-0.5 -0.5 864 501" content="&lt;mxfile host=&quot;drawio-plugin&quot; modified=&quot;2024-04-04T06:41:04.974Z&quot; agent=&quot;5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36&quot; etag=&quot;taKYEidco6uOt1qkeD1a&quot; version=&quot;20.5.3&quot; type=&quot;embed&quot;&gt;&lt;diagram id=&quot;lqUjgnSfmldEnmkFUhgp&quot; name=&quot;Page-1&quot;&gt;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&lt;/diagram&gt;&lt;/mxfile&gt;" style="background-color: rgb(255, 255, 255);"><defs/><g><rect x="263" y="110" width="600" height="360" fill="none" stroke="#666666" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 598px; height: 1px; padding-top: 290px; margin-left: 264px;"><div data-drawio-colors="color: #333333; " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(51, 51, 51); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><font style="font-size: 10px;">Cluster</font></div></div></div></foreignObject><text x="563" y="294" fill="#333333" font-family="Helvetica" font-size="12px" text-anchor="middle">Cluster...</text></switch></g><rect x="273" y="123.5" width="270" height="115" fill="none" stroke="rgb(0, 0, 0)" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 268px; height: 1px; padding-top: 181px; margin-left: 274px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font style="font-size: 10px;"><br /><br /><br /><br /><br /><br />Namespace of ingress-controller<br /></font></div></div></div></foreignObject><text x="408" y="185" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Namespace of ingress-controller...</text></switch></g><rect x="618" y="123.5" width="235" height="306.5" fill="none" stroke="rgb(0, 0, 0)" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 233px; height: 1px; padding-top: 277px; margin-left: 619px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><font style="font-size: 10px;">Namespace: user-2</font></div></div></div></foreignObject><text x="736" y="280" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Namespace: user-2...</text></switch></g><rect x="273" y="250" width="270" height="180" fill="none" stroke="rgb(0, 0, 0)" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 268px; height: 1px; padding-top: 340px; margin-left: 274px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><font style="font-size: 10px;">Namespace: knative-serving</font></div></div></div></foreignObject><text x="408" y="344" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Namespace: knative-serving...</text></switch></g><rect x="648" y="140" width="175" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 173px; height: 1px; padding-top: 170px; margin-left: 649px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Kservice<br /></b>with Queue-Proxy</div></div></div></foreignObject><text x="736" y="174" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Kservice...</text></switch></g><rect x="323" y="140" width="180" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 178px; height: 1px; padding-top: 170px; margin-left: 324px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Ingress Controller</b><br />(Kourier, Contour, Istio)</div></div></div></foreignObject><text x="413" y="174" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Ingress Controller...</text></switch></g><path d="M 103 170 L 286.63 170" fill="none" stroke="#d79b00" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 291.88 170 L 284.88 173.5 L 286.63 170 L 284.88 166.5 Z" fill="#d79b00" stroke="#d79b00" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 170px; margin-left: 198px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">myapp-user-2.example.com</div></div></div></foreignObject><text x="198" y="173" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">myapp-user-2.example.com</text></switch></g><path d="M 88 200 L 88 333.63" fill="none" stroke="#b85450" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 88 338.88 L 84.5 331.88 L 88 333.63 L 91.5 331.88 Z" fill="#b85450" stroke="#b85450" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 270px; margin-left: 88px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">trusts the<br />CA</div></div></div></foreignObject><text x="88" y="273" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">trusts the...</text></switch></g><ellipse cx="88" cy="147.5" rx="7.5" ry="7.5" fill="rgb(255, 255, 255)" stroke="rgb(0, 0, 0)" pointer-events="all"/><path d="M 88 155 L 88 180 M 88 160 L 73 160 M 88 160 L 103 160 M 88 180 L 73 200 M 88 180 L 103 200" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe flex-start; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 207px; margin-left: 88px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 10px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: nowrap;">Application/User<br style="font-size: 10px;" />external to the cluster</div></div></div></foreignObject><text x="88" y="217" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="10px" text-anchor="middle">Applic...</text></switch></g><path d="M 303 170 L 323 170 L 303 170 L 323 170" fill="none" stroke="#6c8ebf" stroke-miterlimit="10" pointer-events="stroke"/><ellipse cx="298" cy="170" rx="5" ry="5" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><path d="M 503 290 L 575.5 290 L 575.5 325 L 641.63 325" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 646.88 325 L 639.88 328.5 L 641.63 325 L 639.88 321.5 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 325px; margin-left: 594px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">create</div></div></div></foreignObject><text x="594" y="328" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">create</text></switch></g><rect x="323" y="260" width="180" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 178px; height: 1px; padding-top: 290px; margin-left: 324px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Serving Controller</b></div></div></div></foreignObject><text x="413" y="294" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Serving Controller</text></switch></g><path d="M 323 370 L 181.87 370" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 176.62 370 L 183.62 366.5 L 181.87 370 L 183.62 373.5 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 370px; margin-left: 249px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">Get Certificate</div></div></div></foreignObject><text x="249" y="373" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">Get Certificate</text></switch></g><path d="M 503 390 L 837 390 L 837 251 L 829.37 251" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 824.12 251 L 831.12 247.5 L 829.37 251 L 831.12 254.5 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 390px; margin-left: 585px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 10px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">populate</div></div></div></foreignObject><text x="585" y="393" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="10px" text-anchor="middle">populate</text></switch></g><rect x="323" y="340" width="180" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 178px; height: 1px; padding-top: 370px; margin-left: 324px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>via cert-manager</b></div></div></div></foreignObject><text x="413" y="374" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">via cert-manager</text></switch></g><path d="M 648 355 L 575.5 355 L 575.5 370 L 509.37 370" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 504.12 370 L 511.12 366.5 L 509.37 370 L 511.12 373.5 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 355px; margin-left: 595px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">read</div></div></div></foreignObject><text x="595" y="358" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">read</text></switch></g><rect x="648" y="310" width="175" height="60" fill="#ffe6cc" stroke="#d79b00" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 173px; height: 1px; padding-top: 340px; margin-left: 649px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Knative Certificate<br /></b>dnsName: myapp-<br />user-2.example.com</div></div></div></foreignObject><text x="736" y="344" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Knative Certificate...</text></switch></g><path d="M 648 251 L 593 251 L 593 185 L 509.37 185" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 504.12 185 L 511.12 181.5 L 509.37 185 L 511.12 188.5 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 222px; margin-left: 593px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">read</div></div></div></foreignObject><text x="593" y="225" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">read</text></switch></g><rect x="648" y="221" width="175" height="60" fill="#f8cecc" stroke="#b85450" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 173px; height: 1px; padding-top: 251px; margin-left: 649px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Secret</b><br />name: &lt;id&gt;</div></div></div></foreignObject><text x="736" y="255" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Secret...</text></switch></g><path d="M 503 170 L 641.63 170" fill="none" stroke="#d79b00" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 646.88 170 L 639.88 173.5 L 641.63 170 L 639.88 166.5 Z" fill="#d79b00" stroke="#d79b00" stroke-miterlimit="10" pointer-events="all"/><path d="M 319.88 90 L 298 165" fill="none" stroke="rgb(0, 0, 0)" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 293 0 L 357 0 L 373 16 L 373 90 L 293 90 L 293 0 Z" fill="#fff2cc" stroke="#d6b656" stroke-miterlimit="10" pointer-events="all"/><path d="M 357 0 L 357 16 L 373 16 Z" fill-opacity="0.05" fill="#000000" stroke="none" pointer-events="all"/><path d="M 357 0 L 357 16 L 373 16" fill="none" stroke="#d6b656" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 78px; height: 1px; padding-top: 45px; margin-left: 294px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">Uses SNI to return the matching certificate</div></div></div></foreignObject><text x="333" y="49" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Uses SNI to r...</text></switch></g><rect x="0.5" y="340" width="175" height="60" fill="#f5f5f5" stroke="#666666" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 173px; height: 1px; padding-top: 370px; margin-left: 2px;"><div data-drawio-colors="color: #333333; " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(51, 51, 51); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>External ACME CA<br /></b>(e.g. Let's encrypt)</div></div></div></foreignObject><text x="88" y="374" fill="#333333" font-family="Helvetica" font-size="12px" text-anchor="middle">External ACME CA...</text></switch></g><rect x="263" y="480" width="120" height="20" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 118px; height: 1px; padding-top: 490px; margin-left: 264px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">Knative Component</div></div></div></foreignObject><text x="323" y="494" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Knative Component</text></switch></g><rect x="383" y="480" width="120" height="20" fill="#f8cecc" stroke="#b85450" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 118px; height: 1px; padding-top: 490px; margin-left: 384px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">Kubernetes Secret</div></div></div></foreignObject><text x="443" y="494" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Kubernetes Secret</text></switch></g><rect x="503" y="480" width="140" height="20" fill="#ffe6cc" stroke="#d79b00" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 138px; height: 1px; padding-top: 490px; margin-left: 504px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">Knative Certificate CR</div></div></div></foreignObject><text x="573" y="494" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Knative Certificate CR</text></switch></g><rect x="648" y="480" width="130" height="20" fill="none" stroke="none" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 128px; height: 1px; padding-top: 490px; margin-left: 649px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font style="font-size: 10px;">Traffic flow + CN/SAN used</font></div></div></div></foreignObject><text x="713" y="494" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Traffic flow + CN/SAN...</text></switch></g><path d="M 653 479.72 L 711 479.7 L 762.63 479.97" fill="none" stroke="#d79b00" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 767.88 479.99 L 760.86 483.46 L 762.63 479.97 L 760.9 476.46 Z" fill="#d79b00" stroke="#d79b00" stroke-miterlimit="10" pointer-events="all"/></g><switch><g requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"/><a transform="translate(0,-5)" xlink:href="https://www.diagrams.net/doc/faq/svg-export-text-problems" target="_blank"><text text-anchor="middle" font-size="10px" x="50%" y="100%">Text is not SVG - cannot display</text></a></switch></svg>
\ No newline at end of file
diff --git a/docs/serving/encryption/encryption-overview.md b/docs/serving/encryption/encryption-overview.md
index f2c4e640c60..c02bf88a4a2 100644
--- a/docs/serving/encryption/encryption-overview.md
+++ b/docs/serving/encryption/encryption-overview.md
@@ -34,7 +34,7 @@ See [Configure external domain encryption](./external-domain-tls.md) for more in
 * Certificate CN/SAN contains the cluster-local domains of a Knative Service, e.g. `myapp.namespace.svc.cluster.local`, `myapp.namespace.svc`, `myapp.namespace`.
 * The certificates are hosted using SNI by the cluster-local endpoint of the ingress-controller.
 * The caller has to trust the CA that signed the certificates (this is out of the scope of Knative). One option to do this is using [trust-manager](https://cert-manager.io/docs/trust/trust-manager/) from cert-manager.
-* To create the certificates, Knative relies on [cert-manager](https://cert-manager.io/) and our bridging component [net-certmanager](https://github.com/knative-extensions/net-certmanager/). They need to be installed and configured for the feature to work.
+* To create the certificates, Knative relies on [cert-manager](https://cert-manager.io/) and the Knative cert-manager integration. They need to be installed and configured for the feature to work.
 
 See [Configure cluster-local domain encryption](./cluster-local-domain-tls.md) for more information on this feature.
 
@@ -44,7 +44,7 @@ See [Configure cluster-local domain encryption](./cluster-local-domain-tls.md) f
 
 Knative system internal components (Ingress-Controller, Activator, Queue-Proxy) are hosting TLS endpoints when this configuration is enabled.
 
-* To get the certificates, Knative relies on [cert-manager](https://cert-manager.io/) and our bridging component [net-certmanager](https://github.com/knative-extensions/net-certmanager/). They need to be installed and configured for the feature to work.
+* To create the certificates, Knative relies on [cert-manager](https://cert-manager.io/) and the Knative cert-manager integration. They need to be installed and configured for the feature to work.
 * Specific SANs are used to verify each connection. Each component needs to trust the CA (possibly the full chain) that signed the certificates. For this, Knative system components will consume and trust a provided `CABundle`. The CA bundle needs to be provided by the cluster administrator, possibly using [trust-manager](https://cert-manager.io/docs/trust/trust-manager/) from cert-manager.
 
 See [Configure Knative system-internal encryption](./system-internal-tls.md) for more information on this feature.
diff --git a/docs/serving/encryption/encryption-system-internal.drawio.svg b/docs/serving/encryption/encryption-system-internal.drawio.svg
index 29fc69436c0..c49f129d736 100644
--- a/docs/serving/encryption/encryption-system-internal.drawio.svg
+++ b/docs/serving/encryption/encryption-system-internal.drawio.svg
@@ -1,4 +1,4 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!-- Do not edit this file with editors other than diagrams.net -->
 <!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="780px" height="544px" viewBox="-0.5 -0.5 780 544" content="&lt;mxfile host=&quot;drawio-plugin&quot; modified=&quot;2023-11-23T08:08:01.027Z&quot; agent=&quot;5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36&quot; etag=&quot;w_cWpl6gliR5P7dWwE14&quot; version=&quot;20.5.3&quot; type=&quot;embed&quot;&gt;&lt;diagram id=&quot;1pr9WBwu8JOKFF5IyURs&quot; name=&quot;Page-1&quot;&gt;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&lt;/diagram&gt;&lt;/mxfile&gt;" style="background-color: rgb(255, 255, 255);"><defs/><g><rect x="219" y="10" width="560" height="500" fill="none" stroke="#666666" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 558px; height: 1px; padding-top: 260px; margin-left: 220px;"><div data-drawio-colors="color: #333333; " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(51, 51, 51); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><font style="font-size: 10px;">Cluster</font></div></div></div></foreignObject><text x="499" y="264" fill="#333333" font-family="Helvetica" font-size="12px" text-anchor="middle">Cluster...</text></switch></g><rect x="229" y="23.5" width="290" height="115" fill="none" stroke="rgb(0, 0, 0)" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 288px; height: 1px; padding-top: 81px; margin-left: 230px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font style="font-size: 10px;">Namespace of ingress-controller<br /><br /><br /><br /><br /><br /><br /></font></div></div></div></foreignObject><text x="374" y="85" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Namespace of ingress-controller...</text></switch></g><rect x="544" y="150" width="225" height="190" fill="none" stroke="rgb(0, 0, 0)" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 223px; height: 1px; padding-top: 245px; margin-left: 545px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><font style="font-size: 10px;">Namespace: user-2</font></div></div></div></foreignObject><text x="657" y="249" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Namespace: user-2...</text></switch></g><rect x="229" y="150" width="290" height="330" fill="none" stroke="rgb(0, 0, 0)" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 288px; height: 1px; padding-top: 315px; margin-left: 230px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><font style="font-size: 10px;">Namespace: knative-serving</font></div></div></div></foreignObject><text x="374" y="319" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Namespace: knative-serving...</text></switch></g><path d="M 459 200 L 567.63 200" fill="none" stroke="#ff3333" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 572.88 200 L 565.88 203.5 L 567.63 200 L 565.88 196.5 Z" fill="#ff3333" stroke="#ff3333" stroke-miterlimit="10" pointer-events="all"/><rect x="279" y="170" width="180" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 178px; height: 1px; padding-top: 200px; margin-left: 280px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; font-weight: bold; white-space: normal; overflow-wrap: normal;">Activator</div></div></div></foreignObject><text x="369" y="204" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle" font-weight="bold">Activator</text></switch></g><rect x="574" y="170" width="175" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 173px; height: 1px; padding-top: 200px; margin-left: 575px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Kservice<br /></b>with Queue-Proxy</div></div></div></foreignObject><text x="662" y="204" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Kservice...</text></switch></g><path d="M 369 121 L 369 163.63" fill="none" stroke="#ff3333" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 369 168.88 L 365.5 161.88 L 369 163.63 L 372.5 161.88 Z" fill="#ff3333" stroke="#ff3333" stroke-miterlimit="10" pointer-events="all"/><rect x="279" y="61" width="180" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 178px; height: 1px; padding-top: 91px; margin-left: 280px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Ingress Controller</b><br />(Kourier, Contour, Istio)</div></div></div></foreignObject><text x="369" y="95" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Ingress Controller...</text></switch></g><path d="M 369 121 L 568.06 197.71" fill="none" stroke="#ff3333" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 572.96 199.6 L 565.17 200.35 L 568.06 197.71 L 567.68 193.81 Z" fill="#ff3333" stroke="#ff3333" stroke-miterlimit="10" pointer-events="all"/><path d="M 279 421 L 249.03 420.03 L 249.03 280.03 L 272.63 280.01" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 277.88 280 L 270.89 283.51 L 272.63 280.01 L 270.88 276.51 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 350px; margin-left: 249px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 10px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">populate</div></div></div></foreignObject><text x="249" y="353" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="10px" text-anchor="middle">populate</text></switch></g><rect x="279" y="320" width="180" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 178px; height: 1px; padding-top: 350px; margin-left: 280px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; font-weight: bold; white-space: normal; overflow-wrap: normal;">Serving Controller</div></div></div></foreignObject><text x="369" y="354" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle" font-weight="bold">Serving Controller</text></switch></g><rect x="574" y="255" width="175" height="60" fill="#f8cecc" stroke="#b85450" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 173px; height: 1px; padding-top: 285px; margin-left: 575px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Secret</b><br />name: serving-certs</div></div></div></foreignObject><text x="662" y="289" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Secret...</text></switch></g><path d="M 369.03 243.63 L 369.03 230.03 L 369.03 250.03 L 369.03 230" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 369.03 248.88 L 365.53 241.88 L 369.03 243.63 L 372.53 241.88 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 239px; margin-left: 381px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 10px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">use</div></div></div></foreignObject><text x="381" y="242" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="10px" text-anchor="middle">use</text></switch></g><rect x="279" y="250" width="180" height="60" fill="#f8cecc" stroke="#b85450" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 178px; height: 1px; padding-top: 280px; margin-left: 280px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Secret</b><br />name: routing-serving-certs</div></div></div></foreignObject><text x="369" y="284" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Secret...</text></switch></g><path d="M 459 421 L 763.03 420.03 L 763.03 285 L 755.37 285" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 750.12 285 L 757.12 281.5 L 755.37 285 L 757.12 288.5 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 421px; margin-left: 536px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 10px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">populate</div></div></div></foreignObject><text x="536" y="424" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="10px" text-anchor="middle">populate</text></switch></g><path d="M 459 350 L 529.03 350.03 L 529.03 285 L 567.63 285" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 572.88 285 L 565.88 288.5 L 567.63 285 L 565.88 281.5 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 340px; margin-left: 477px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 10px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">create</div></div></div></foreignObject><text x="477" y="343" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="10px" text-anchor="middle">create</text></switch></g><path d="M 661.49 248.63 L 661.49 240.03 L 661.5 230" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 661.5 253.88 L 657.99 246.89 L 661.49 248.63 L 664.99 246.88 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 242px; margin-left: 674px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 10px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">use</div></div></div></foreignObject><text x="674" y="245" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="10px" text-anchor="middle">use</text></switch></g><path d="M 279 91 L 87.03 91 L 87.03 397.66" fill="none" stroke="#b85450" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 87.03 402.91 L 83.53 395.91 L 87.03 397.66 L 90.53 395.91 Z" fill="#b85450" stroke="#b85450" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 384px; margin-left: 99px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">trust</div></div></div></foreignObject><text x="99" y="387" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">trust</text></switch></g><path d="M 279 200 L 199.03 200.03 L 87 200" fill="none" stroke="#b85450" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 661.49 170 L 661.49 0.03 L 87.03 0.03 L 87.03 90.03 L 87 78" fill="none" stroke="#b85450" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><rect x="219" y="520.29" width="120" height="20" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 118px; height: 1px; padding-top: 530px; margin-left: 220px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">Knative Component</div></div></div></foreignObject><text x="279" y="534" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Knative Component</text></switch></g><rect x="339" y="520.29" width="120" height="20" fill="#f8cecc" stroke="#b85450" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 118px; height: 1px; padding-top: 530px; margin-left: 340px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">Kubernetes Secret</div></div></div></foreignObject><text x="399" y="534" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Kubernetes Secret</text></switch></g><rect x="462" y="522.58" width="130" height="20" fill="none" stroke="none" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 128px; height: 1px; padding-top: 533px; margin-left: 463px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font style="font-size: 10px;">Traffic flow</font></div></div></div></foreignObject><text x="527" y="536" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Traffic flow</text></switch></g><path d="M 467 522.3 L 525.03 522.31 L 576.63 522.55" fill="none" stroke="#ff3333" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 581.88 522.57 L 574.87 526.04 L 576.63 522.55 L 574.9 519.04 Z" fill="#ff3333" stroke="#ff3333" stroke-miterlimit="10" pointer-events="all"/><rect x="279" y="391" width="180" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 178px; height: 1px; padding-top: 421px; margin-left: 280px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; font-weight: bold; white-space: normal; overflow-wrap: normal;"><b>net-certmanager<br />(via installed cert-manager)<br /></b></div></div></div></foreignObject><text x="369" y="425" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle" font-weight="bold">net-certmanager...</text></switch></g><rect x="0" y="404" width="175" height="60" fill="#f5f5f5" stroke="#666666" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 173px; height: 1px; padding-top: 434px; margin-left: 1px;"><div data-drawio-colors="color: #333333; " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(51, 51, 51); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>External CA<br /></b>(e.g. Company CA, Vault, allowed to sign *.cluster.local)</div></div></div></foreignObject><text x="88" y="438" fill="#333333" font-family="Helvetica" font-size="12px" text-anchor="middle">External CA...</text></switch></g><path d="M 279 436 L 227.03 436.03 L 227.03 434.03 L 181.37 434" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 176.12 434 L 183.12 430.5 L 181.37 434 L 183.12 437.5 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 435px; margin-left: 227px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">Get Certificate</div></div></div></foreignObject><text x="227" y="438" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">Get Certificate</text></switch></g></g><switch><g requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"/><a transform="translate(0,-5)" xlink:href="https://www.diagrams.net/doc/faq/svg-export-text-problems" target="_blank"><text text-anchor="middle" font-size="10px" x="50%" y="100%">Text is not SVG - cannot display</text></a></switch></svg>
\ No newline at end of file
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="780px" height="544px" viewBox="-0.5 -0.5 780 544" content="&lt;mxfile host=&quot;drawio-plugin&quot; modified=&quot;2024-04-04T06:41:12.266Z&quot; agent=&quot;5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36&quot; etag=&quot;BzMkNvrUeTsG_7s0ldsT&quot; version=&quot;20.5.3&quot; type=&quot;embed&quot;&gt;&lt;diagram id=&quot;1pr9WBwu8JOKFF5IyURs&quot; name=&quot;Page-1&quot;&gt;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&lt;/diagram&gt;&lt;/mxfile&gt;" style="background-color: rgb(255, 255, 255);"><defs/><g><rect x="219" y="10" width="560" height="500" fill="none" stroke="#666666" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 558px; height: 1px; padding-top: 260px; margin-left: 220px;"><div data-drawio-colors="color: #333333; " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(51, 51, 51); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><font style="font-size: 10px;">Cluster</font></div></div></div></foreignObject><text x="499" y="264" fill="#333333" font-family="Helvetica" font-size="12px" text-anchor="middle">Cluster...</text></switch></g><rect x="229" y="23.5" width="290" height="115" fill="none" stroke="rgb(0, 0, 0)" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 288px; height: 1px; padding-top: 81px; margin-left: 230px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font style="font-size: 10px;">Namespace of ingress-controller<br /><br /><br /><br /><br /><br /><br /></font></div></div></div></foreignObject><text x="374" y="85" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Namespace of ingress-controller...</text></switch></g><rect x="544" y="150" width="225" height="190" fill="none" stroke="rgb(0, 0, 0)" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 223px; height: 1px; padding-top: 245px; margin-left: 545px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><font style="font-size: 10px;">Namespace: user-2</font></div></div></div></foreignObject><text x="657" y="249" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Namespace: user-2...</text></switch></g><rect x="229" y="150" width="290" height="330" fill="none" stroke="rgb(0, 0, 0)" stroke-dasharray="1 1" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 288px; height: 1px; padding-top: 315px; margin-left: 230px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><font style="font-size: 10px;">Namespace: knative-serving</font></div></div></div></foreignObject><text x="374" y="319" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Namespace: knative-serving...</text></switch></g><path d="M 459 200 L 567.63 200" fill="none" stroke="#ff3333" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 572.88 200 L 565.88 203.5 L 567.63 200 L 565.88 196.5 Z" fill="#ff3333" stroke="#ff3333" stroke-miterlimit="10" pointer-events="all"/><rect x="279" y="170" width="180" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 178px; height: 1px; padding-top: 200px; margin-left: 280px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; font-weight: bold; white-space: normal; overflow-wrap: normal;">Activator</div></div></div></foreignObject><text x="369" y="204" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle" font-weight="bold">Activator</text></switch></g><rect x="574" y="170" width="175" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 173px; height: 1px; padding-top: 200px; margin-left: 575px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Kservice<br /></b>with Queue-Proxy</div></div></div></foreignObject><text x="662" y="204" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Kservice...</text></switch></g><path d="M 369 121 L 369 163.63" fill="none" stroke="#ff3333" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 369 168.88 L 365.5 161.88 L 369 163.63 L 372.5 161.88 Z" fill="#ff3333" stroke="#ff3333" stroke-miterlimit="10" pointer-events="all"/><rect x="279" y="61" width="180" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 178px; height: 1px; padding-top: 91px; margin-left: 280px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Ingress Controller</b><br />(Kourier, Contour, Istio)</div></div></div></foreignObject><text x="369" y="95" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Ingress Controller...</text></switch></g><path d="M 369 121 L 568.06 197.71" fill="none" stroke="#ff3333" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 572.96 199.6 L 565.17 200.35 L 568.06 197.71 L 567.68 193.81 Z" fill="#ff3333" stroke="#ff3333" stroke-miterlimit="10" pointer-events="all"/><path d="M 279 421 L 279 420 L 249 420 L 249 280 L 272.63 280" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 277.88 280 L 270.88 283.5 L 272.63 280 L 270.88 276.5 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 350px; margin-left: 249px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 10px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">populate</div></div></div></foreignObject><text x="249" y="353" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="10px" text-anchor="middle">populate</text></switch></g><rect x="279" y="320" width="180" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 178px; height: 1px; padding-top: 350px; margin-left: 280px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; font-weight: bold; white-space: normal; overflow-wrap: normal;">Serving Controller</div></div></div></foreignObject><text x="369" y="354" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle" font-weight="bold">Serving Controller</text></switch></g><rect x="574" y="255" width="175" height="60" fill="#f8cecc" stroke="#b85450" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 173px; height: 1px; padding-top: 285px; margin-left: 575px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Secret</b><br />name: serving-certs</div></div></div></foreignObject><text x="662" y="289" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Secret...</text></switch></g><path d="M 369 243.63 L 369 230 L 369 250 L 369 230" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 369 248.88 L 365.5 241.88 L 369 243.63 L 372.5 241.88 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 239px; margin-left: 381px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 10px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">use</div></div></div></foreignObject><text x="381" y="242" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="10px" text-anchor="middle">use</text></switch></g><rect x="279" y="250" width="180" height="60" fill="#f8cecc" stroke="#b85450" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 178px; height: 1px; padding-top: 280px; margin-left: 280px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>Secret</b><br />name: routing-serving-certs</div></div></div></foreignObject><text x="369" y="284" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Secret...</text></switch></g><path d="M 459 421 L 459 420 L 763 420 L 763 285 L 755.37 285" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 750.12 285 L 757.12 281.5 L 755.37 285 L 757.12 288.5 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 420px; margin-left: 535px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 10px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">populate</div></div></div></foreignObject><text x="535" y="423" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="10px" text-anchor="middle">populate</text></switch></g><path d="M 459 350 L 529 350 L 529 285 L 567.63 285" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 572.88 285 L 565.88 288.5 L 567.63 285 L 565.88 281.5 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 340px; margin-left: 477px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 10px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">create</div></div></div></foreignObject><text x="477" y="343" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="10px" text-anchor="middle">create</text></switch></g><path d="M 661.5 248.63 L 661.5 240 L 661.5 230" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 661.5 253.88 L 658 246.88 L 661.5 248.63 L 665 246.88 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 242px; margin-left: 675px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 10px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">use</div></div></div></foreignObject><text x="675" y="245" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="10px" text-anchor="middle">use</text></switch></g><path d="M 279 91 L 87.5 91 L 87.5 397.63" fill="none" stroke="#b85450" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 87.5 402.88 L 84 395.88 L 87.5 397.63 L 91 395.88 Z" fill="#b85450" stroke="#b85450" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 384px; margin-left: 100px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">trust</div></div></div></foreignObject><text x="100" y="387" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">trust</text></switch></g><path d="M 279 200 L 199 200 L 87 200" fill="none" stroke="#b85450" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 661.5 170 L 661.5 0 L 87 0 L 87 90 L 87 78" fill="none" stroke="#b85450" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><rect x="219" y="520.29" width="120" height="20" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 118px; height: 1px; padding-top: 530px; margin-left: 220px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">Knative Component</div></div></div></foreignObject><text x="279" y="534" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Knative Component</text></switch></g><rect x="339" y="520.29" width="120" height="20" fill="#f8cecc" stroke="#b85450" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 118px; height: 1px; padding-top: 530px; margin-left: 340px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;">Kubernetes Secret</div></div></div></foreignObject><text x="399" y="534" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Kubernetes Secret</text></switch></g><rect x="462" y="522.58" width="130" height="20" fill="none" stroke="none" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 128px; height: 1px; padding-top: 533px; margin-left: 463px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><font style="font-size: 10px;">Traffic flow</font></div></div></div></foreignObject><text x="527" y="536" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle">Traffic flow</text></switch></g><path d="M 467 522.3 L 525 522.3 L 576.63 522.55" fill="none" stroke="#ff3333" stroke-miterlimit="10" pointer-events="stroke"/><path d="M 581.88 522.57 L 574.87 526.04 L 576.63 522.55 L 574.9 519.04 Z" fill="#ff3333" stroke="#ff3333" stroke-miterlimit="10" pointer-events="all"/><rect x="279" y="391" width="180" height="60" fill="#dae8fc" stroke="#6c8ebf" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 178px; height: 1px; padding-top: 421px; margin-left: 280px;"><div data-drawio-colors="color: rgb(0, 0, 0); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; font-weight: bold; white-space: normal; overflow-wrap: normal;"><b>via cert-manager<br /></b></div></div></div></foreignObject><text x="369" y="425" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="12px" text-anchor="middle" font-weight="bold">via cert-manager&#xa;</text></switch></g><rect x="0" y="404" width="175" height="60" fill="#f5f5f5" stroke="#666666" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 173px; height: 1px; padding-top: 434px; margin-left: 1px;"><div data-drawio-colors="color: #333333; " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 12px; font-family: Helvetica; color: rgb(51, 51, 51); line-height: 1.2; pointer-events: all; white-space: normal; overflow-wrap: normal;"><b>External CA<br /></b>(e.g. Company CA, Vault, allowed to sign *.cluster.local)</div></div></div></foreignObject><text x="88" y="438" fill="#333333" font-family="Helvetica" font-size="12px" text-anchor="middle">External CA...</text></switch></g><path d="M 279 436 L 227 436 L 227 434 L 181.37 434" fill="none" stroke="#666666" stroke-miterlimit="10" stroke-dasharray="1 1" pointer-events="stroke"/><path d="M 176.12 434 L 183.12 430.5 L 181.37 434 L 183.12 437.5 Z" fill="#666666" stroke="#666666" stroke-miterlimit="10" pointer-events="all"/><g transform="translate(-0.5 -0.5)"><switch><foreignObject pointer-events="none" width="100%" height="100%" requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility" style="overflow: visible; text-align: left;"><div xmlns="http://www.w3.org/1999/xhtml" style="display: flex; align-items: unsafe center; justify-content: unsafe center; width: 1px; height: 1px; padding-top: 435px; margin-left: 227px;"><div data-drawio-colors="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); " style="box-sizing: border-box; font-size: 0px; text-align: center;"><div style="display: inline-block; font-size: 11px; font-family: Helvetica; color: rgb(0, 0, 0); line-height: 1.2; pointer-events: all; background-color: rgb(255, 255, 255); white-space: nowrap;">Get Certificate</div></div></div></foreignObject><text x="227" y="438" fill="rgb(0, 0, 0)" font-family="Helvetica" font-size="11px" text-anchor="middle">Get Certificate</text></switch></g></g><switch><g requiredFeatures="http://www.w3.org/TR/SVG11/feature#Extensibility"/><a transform="translate(0,-5)" xlink:href="https://www.diagrams.net/doc/faq/svg-export-text-problems" target="_blank"><text text-anchor="middle" font-size="10px" x="50%" y="100%">Text is not SVG - cannot display</text></a></switch></svg>
\ No newline at end of file
diff --git a/docs/serving/encryption/external-domain-tls.md b/docs/serving/encryption/external-domain-tls.md
index 9e6c557efe0..ca2ef3b8663 100644
--- a/docs/serving/encryption/external-domain-tls.md
+++ b/docs/serving/encryption/external-domain-tls.md
@@ -21,13 +21,14 @@ You must meet the following requirements to enable secure HTTPS connections:
 
 ## Automatically obtain and renew certificates
 
-### Installing and configuring net-certmanager
+### Installing and configuring cert-manager and integration
 
 !!! info
     If you want to use HTTP-01 challenge, you need to configure your custom domain to map to the IP of ingress. 
     You can achieve this by adding a DNS A record to map the domain to the IP according to the instructions of your DNS provider.
 
-First, you need to install and configure `cert-manager` and `net-certmanager`. Please refer to [Installing and configuring net-certmanager](./install-and-configure-net-certmanager.md) for details.
+First, you need to install and configure `cert-manager` and the Knative cert-manager integration.
+Please refer to [Configuring Knative cert-manager integration](./configure-certmanager-integration.md) for details.
 
 
 ### Configuring Knative Serving
@@ -43,13 +44,13 @@ Only one of them can be active at the same time!
 
 Update the [`config-network` ConfigMap](https://github.com/knative/serving/blob/main/config/core/configmaps/network.yaml) in the `knative-serving` namespace to enable `external-domain-tls`:
 
-1.  Run the following command to edit your `config-network` ConfigMap:
+1. Run the following command to edit your `config-network` ConfigMap:
 
     ```bash
     kubectl edit configmap config-network -n knative-serving
     ```
 
-1.  Add the `external-domain-tls: Enabled` attribute under the `data` section:
+1. Add the `external-domain-tls: Enabled` attribute under the `data` section:
 
     ```yaml
     apiVersion: v1
@@ -63,6 +64,12 @@ Update the [`config-network` ConfigMap](https://github.com/knative/serving/blob/
        ...
     ```
 
+1. Restart the Knative Serving controller to start the Knative cert-manager integration:
+   
+    ```bash
+    kubectl rollout restart deploy/controller -n knative-serving
+    ```
+
 #### Using one wildcard certificate per namespace
 
 !!! warning
@@ -105,6 +112,11 @@ kubectl patch --namespace knative-serving configmap config-network -p '{"data":
 
 For more details on namespace selectors, see [the Kubernetes documentation](https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors).
 
+Restart the Knative Serving controller to start the Knative cert-manager integration:
+
+```bash
+kubectl rollout restart deploy/controller -n knative-serving
+```
 
 Congratulations! Knative is now configured to obtain and renew TLS certificates.
 When your TLS Certificate is issued and available on your cluster, your Knative services will
@@ -277,7 +289,7 @@ Use the following steps in the relevant tab to add your certificate to your Knat
     A quick note on trust, all clients that call the external domain of a Knative Service need to trust the Certificate Authority
     that signed the certificates. This is out of scope of Knative, but needs to be addressed to ensure a working system. Especially,
     when a Certificate Authority performs a rotation of the CA or the intermediate certificates. Find more information on
-    [Install and configure net-certmanager](./install-and-configure-net-certmanager.md#managing-trust-and-rotation-without-downtime).
+    [Configuring Knative cert-manager integration](./configure-certmanager-integration.md#managing-trust-and-rotation-without-downtime).
 
 
 ## Additional configuration
diff --git a/docs/serving/encryption/system-internal-tls.md b/docs/serving/encryption/system-internal-tls.md
index 98b5bb35057..c3d01a8bc11 100644
--- a/docs/serving/encryption/system-internal-tls.md
+++ b/docs/serving/encryption/system-internal-tls.md
@@ -12,11 +12,15 @@ You must meet the following requirements to enable secure HTTPS connections:
 !!! warning
     This feature is currently only supported with Kourier as a networking layer.
 
-## Enabling system-internal-tls
+### Installing and configuring cert-manager and integration
+
+First, you need to install and configure `cert-manager` and the Knative cert-manager integration.
+Please refer to [Configuring Knative cert-manager integration](./configure-certmanager-integration.md) for details.
 
-First, you need to install and configure `cert-manager` and `net-certmanager`. Please refer to [Installing and configuring net-certmanager](./install-and-configure-net-certmanager.md) for details.
 
-Then, update the [`config-network` ConfigMap](https://github.com/knative/serving/blob/main/config/core/configmaps/network.yaml) in the `knative-serving` namespace to enable `system-internal-tls`:
+## Enabling system-internal-tls
+
+To enable `system-internal-tls` update the [`config-network` ConfigMap](https://github.com/knative/serving/blob/main/config/core/configmaps/network.yaml) in the `knative-serving` namespace:
 
 1.  Run the following command to edit your `config-network` ConfigMap:
 
@@ -38,13 +42,11 @@ Then, update the [`config-network` ConfigMap](https://github.com/knative/serving
        ...
     ```
 
-1.  Restart the Activator component
-
-    !!! warning
-        When the `system-internal-tls` feature is activated, the Activator component needs to be restarted to reconfigure its internal web server, as this is not possible during runtime.
+1.  Restart the Knative activator and controller component to start the Knative cert-manager integration:
  
     ```bash
-      kubectl rollout restart deploy/activator -n knative-serving
+    kubectl rollout restart deploy/activator -n knative-serving
+    kubectl rollout restart deploy/controller -n knative-serving
     ```
 
 Congratulations! Knative will now use TLS between its internal system components (Ingress-Controller, Activator and Queue-Proxy).
@@ -76,7 +78,7 @@ Congratulations! Knative will now use TLS between its internal system components
 !!! warning
     A quick note on trust, Knative will automatically trust the CA that signed the Certificates, if the cert-manager issuer allows 
     putting the CA directly in the field `ca.crt` of the certificates `Secret`. Regardless of that, Cluster admins **should always**
-    provide a trust-bundle, as described in [Install and configure net-certmanager](./install-and-configure-net-certmanager.md#managing-trust-and-rotation-without-downtime).
+    provide a trust-bundle, as described in  [Configuring Knative cert-manager integration](./configure-certmanager-integration.md#managing-trust-and-rotation-without-downtime).
     This is also strongly recommended in the [cert-manager documentation](https://cert-manager.io/docs/trust/trust-manager/#cert-manager-integration-intentionally-copying-ca-certificates)
     to avoid issues with rotation.