Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

k8s上abac功能实践 | 吐核|Core Dump #33

Open
lovejoy opened this issue Dec 17, 2018 · 0 comments
Open

k8s上abac功能实践 | 吐核|Core Dump #33

lovejoy opened this issue Dec 17, 2018 · 0 comments
Labels
b44ebe253be11d557de4cc07f735cecf Gitalk

Comments

@lovejoy
Copy link
Owner

lovejoy commented Dec 17, 2018

https://blog.spider.im/2018/12/17/k8s-abac/

k8s提供了2种方式用来权限控制，abac和rbac，abac是基于一堆属性(attribute)描述成的策略(policy)来做的限制。比如限制某个用户只能对某个namespace下的资源操作，就可以写成类似下面的描述1{"apiVersion": "abac.authorization.kubernetes.io/v1beta1", "kind": "Policy", "spec":
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
b44ebe253be11d557de4cc07f735cecf Gitalk
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@lovejoy