Authorization Flow

Authorization Flow An architecture diagram generated by Archify. Authenticated User / Service · authorization requester · Architecture component Authenticated User / Service authorization requester API Server · kube-apiserver · Architecture component API Server kube-apiserver RBAC · Role-Based Access Control · Authorization Modes RBAC Role-Based Access Control ABAC · Attribute-Based Access Control · Authorization Modes ABAC Attribute-Based Access Control Node Authorization · kubelet requests only · Authorization Modes Node Authorization kubelet requests only Webhook Authorization · external service query · Authorization Modes Webhook Authorization external service query Authorization Decision · allow / deny · Architecture component Authorization Decision allow / deny Process Request · allowed · Architecture component Process Request allowed Deny Request · denied · Architecture component Deny Request denied Role / ClusterRole · permission definition · RBAC Components Role / ClusterRole permission definition RoleBinding / ClusterRoleBinding · permission assignment · RBAC Components RoleBinding / ClusterRoleBinding permission assignment authorization request evaluate allow deny defines permissions assigns permissions Authorization Modes RBAC Components Legend Backend Security External