[zh] Update authorization.md

Signed-off-by: xin.li <xin.li@daocloud.io>
This commit is contained in:
xin.li
2022-04-04 16:56:51 +08:00
parent b3b7a184e0
commit 48b5e2b898
@@ -160,7 +160,7 @@ DELETE | delete(针对单个资源)、deletecollection(针对集合)
<!--
Kubernetes sometimes checks authorization for additional permissions using specialized verbs. For example:
* [PodSecurityPolicy](/docs/concepts/policy/pod-security-policy/)
* [PodSecurityPolicy](/docs/concepts/security/pod-security-policy/)
* `use` verb on `podsecuritypolicies` resources in the `policy` API group.
* [RBAC](/docs/reference/access-authn-authz/rbac/#privilege-escalation-prevention-and-bootstrapping)
* `bind` and `escalate` verbs on `roles` and `clusterroles` resources in the `rbac.authorization.k8s.io` API group.
@@ -169,7 +169,7 @@ Kubernetes sometimes checks authorization for additional permissions using speci
-->
Kubernetes 有时使用专门的动词以对额外的权限进行鉴权。例如:
* [PodSecurityPolicy](/zh/docs/concepts/policy/pod-security-policy/)
* [PodSecurityPolicy](/zh/docs/concepts/security/pod-security-policy/)
* `policy` API 组中 `podsecuritypolicies` 资源使用 `use` 动词
* [RBAC](/zh/docs/reference/access-authn-authz/rbac/#privilege-escalation-prevention-and-bootstrapping)
*`rbac.authorization.k8s.io` API 组中 `roles``clusterroles` 资源的 `bind`