读书笔记 : 云原生应用的安全

 https://mp.weixin.qq.com/s/81d1ynZhHTw8UxzP1NnNeg

  • OpenID：Authentication 负责认证

  • OAuth ：Authorization   负责授权

  • Token：令牌。在云原生时代，令牌通常使用JWT的方式（JSON Web Token）





Identity是一种资源，用于记录来自特定用户和身份提供者的成功身份验证尝试。

有关身份验证来源的任何数据都存储在身份上。

仅单个用户资源与身份资源相关联。


授权和身份验证是两个安全层，负责使用户能够与群集进行交互。

当用户向API发出请求时，该用户与该请求相关联。

认证层负责识别用户。

然后，来自身份验证层的有关发出请求的用户的信息将由授权层使用，以确定是否满足该请求。

验证用户身份后，RBAC策略将确定该用户有权执行的操作。如果API请求包含无效的身份验证，则匿名系统用户会将其认证为请求。



可以将OpenShift OAuth Server对接多个Identity Providers

可以使用OpenShift内置的OAuth做授权管理，也可以对接外部的OAuth服务器，


Comments

Post a Comment

Popular posts from this blog

Such a cold summer

I almost did not wear the t-shirt alone this summer, always have a jacket on when I went outside. Most of time the temperature is lower than 20 c-degree. Totally did not get the feeling of summer. What a pity.
Read more

My Unsolve Questions

How to reduce the admin work for tester? test Measurement, Management, Communication, Automation.  Agile: Test Might take longer time than development.  How to solve that in Agile? how to make exp test efficient in scurm. does tester be scurm master better sit with developer or tester in scrum should we can Quality advisor Automation test negitive test?
Read more

My interview questions to a company using SAFe.

What is the setup of your QA team?  What is the ratio of Test vs Developer Do you have the system layer test?  Do you have the non function test layer?  How do you divide the train, do you have plat form team, and do they have their own train? Any support work in the team` What is the good part, and what is the bad part How long does the team learn how to do PI planning.  What is the biggest challenge you meet,  Did you have any challenge when you split up the team?  Any suggestion on how to devide the team, and what is the practise in lego.  In the new setup, is it possible different team work on a same product of same feature?  BDD:  In which level do you apply the BDD, how do you use it in integration level? who responsible for design and implemented BDD? Agile: What is your product, do you have technical(platform) team, how do you make them work in the agile framework.  Special list can swap among ...
Read more