diff --git a/.DS_Store b/.DS_Store index 0bd0f44..883c1a8 100644 Binary files a/.DS_Store and b/.DS_Store differ diff --git a/apiServer/Kubernetes源码学习-APIServer-P2-启动流程.md b/apiServer/Kubernetes源码学习-APIServer-P2-启动流程.md index bf2dc37..deb1fab 100644 --- a/apiServer/Kubernetes源码学习-APIServer-P2-启动流程.md +++ b/apiServer/Kubernetes源码学习-APIServer-P2-启动流程.md @@ -292,19 +292,19 @@ https://swagger.io/specification/#introduction APIServer支持如下的认证策略: -- ### X509 Client Certs +- X509 Client Certs -- ### Static Token File +- Static Token File -- ### Bootstrap Tokens +- Bootstrap Tokens -- ### Service Account Tokens +- Service Account Tokens -- ### OpenID Connect Tokens(OIDC) +- OpenID Connect Tokens(OIDC) -- ### Webhook Token Authentication +- Webhook Token Authentication -- ### Authenticating Proxy +- Authenticating Proxy 参考官方文档: @@ -523,17 +523,19 @@ func New(authRequestHandlers ...authenticator.Request) authenticator.Request { APIServer支持如下的授权策略: -- ### AlwaysAllow +- AlwaysAllow -- ### AlwaysDeny +- AlwaysDeny -- ### webhook授权 +- webhook授权 -- ### node授权 +- node授权 + +- ABAC授权 + +- RBAC授权 -- ### ABAC授权 -- ### RBAC授权 参考官方文档: