[zh] Update authorization.md
Signed-off-by: xin.li <xin.li@daocloud.io>
This commit is contained in:
@@ -160,7 +160,7 @@ DELETE | delete(针对单个资源)、deletecollection(针对集合)
|
||||
<!--
|
||||
Kubernetes sometimes checks authorization for additional permissions using specialized verbs. For example:
|
||||
|
||||
* [PodSecurityPolicy](/docs/concepts/policy/pod-security-policy/)
|
||||
* [PodSecurityPolicy](/docs/concepts/security/pod-security-policy/)
|
||||
* `use` verb on `podsecuritypolicies` resources in the `policy` API group.
|
||||
* [RBAC](/docs/reference/access-authn-authz/rbac/#privilege-escalation-prevention-and-bootstrapping)
|
||||
* `bind` and `escalate` verbs on `roles` and `clusterroles` resources in the `rbac.authorization.k8s.io` API group.
|
||||
@@ -169,7 +169,7 @@ Kubernetes sometimes checks authorization for additional permissions using speci
|
||||
-->
|
||||
Kubernetes 有时使用专门的动词以对额外的权限进行鉴权。例如:
|
||||
|
||||
* [PodSecurityPolicy](/zh/docs/concepts/policy/pod-security-policy/)
|
||||
* [PodSecurityPolicy](/zh/docs/concepts/security/pod-security-policy/)
|
||||
* `policy` API 组中 `podsecuritypolicies` 资源使用 `use` 动词
|
||||
* [RBAC](/zh/docs/reference/access-authn-authz/rbac/#privilege-escalation-prevention-and-bootstrapping)
|
||||
* 对 `rbac.authorization.k8s.io` API 组中 `roles` 和 `clusterroles` 资源的 `bind`
|
||||
|
||||
Reference in New Issue
Block a user