direction: down

patient: "Patient\nnavigateur"
kms: "KMS\ndu cloud" { shape: cylinder }
cluster: "Cluster Kubernetes" {
  ingress: "Entrée\ningress"
  api: "API\nrendez-vous"
  dns: "DNS\ninterne"
  prom: "Prometheus\nalertes" { shape: cylinder }
  ingress -> api { class: principal }
  api -> dns: "résolution" { class: indirect }
  api -> prom: "métriques" { class: indirect }
}
donnees: "Zone données" {
  pg: "PostgreSQL\nrendez-vous" { shape: cylinder }
}
partages: "Services partagés" {
  idp: "Keycloak"
  ldap: "Annuaire\ndu personnel" { shape: cylinder }
  bao: "OpenBao\nsecrets" { shape: cylinder }
  harbor: "Harbor\nregistre" { shape: cylinder }
  idp -> ldap: "comptes"
}
patient -> cluster.ingress: "HTTPS" { class: principal }
cluster.api -> donnees.pg: "SQL" { class: principal }
patient -> partages.idp: "connexion"
cluster.api -> partages.idp: "clé publique" { class: indirect }
cluster.api -> partages.bao: "compte de base" { class: indirect }
partages.bao -> kms: "déverrouillage" { class: indirect }
cluster -> partages.harbor: "images" { class: indirect }