kubernetes
/
website
mirror of https://github.com/kubernetes/website.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

[zh] Update node.md (#32286) 

* [zh] Update node.md

[zh] Update node.md
Sign off xin.li<xin.li@daocloud.io>

* Update node.md

* Update node.md
pull/32371/head
my-git9 2022-03-16 17:57:49 +08:00 committed by GitHub
parent 0b479f7ac8
commit 94e02386e6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
content/zh/docs/reference/access-authn-authz/node.md
View File

@ -73,12 +73,14 @@ Write operations:
Auth-related operations:
-->
* 对于基于 TLS 的启动引导过程时使用的 certificationsigningrequests API 的读/写权限
* 为委派的身份验证/授权检查创建 tokenreviews 和 subjectaccessreviews 的能力
* 对于基于 TLS 的启动引导过程时使用的
[certificationsigningrequests API](/zh/docs/reference/access-authn-authz/certificate-signing-requests/)
的读/写权限
* 为委派的身份验证/授权检查创建 TokenReview 和 SubjectAccessReview 的能力
<!--
* read/write access to the certificationsigningrequests API for TLS bootstrapping
* the ability to create tokenreviews and subjectaccessreviews for delegated authentication/authorization checks
* read/write access to the [CertificateSigningRequests API](/docs/reference/access-authn-authz/certificate-signing-requests/) for TLS bootstrapping
* the ability to create TokenReviews and SubjectAccessReviews for delegated authentication/authorization checks
-->
在将来的版本中，节点鉴权器可能会添加或删除权限，以确保 kubelet 具有正确操作所需的最小权限集。