User and workload identities in Kubernetes
出处：
learnk8s.io
作者：
Arthur Chiao
In this article, you will explore how users and workloads are authenticated with the Kubernetes API server. The Kubernetes API server exposes an HTTP API that lets end-users, different parts of your cluster, and external components communicate with one another. Most operations can be performed through kubectl, but you can also access the API directly using REST calls. But how is the access to the API restricted only to authorized users?
