mirror of
https://github.com/seaweedfs/seaweedfs.git
synced 2026-10-24 15:00:43 +02:00
Updated Kubernetes ServiceAccount Authentication (markdown)
1 parent
5d49f0d8e4
commit
5c0e4ae91c
1 file changed
+2
-2
@@ -17,7 +17,7 @@ The result: pods authenticate to the S3 gateway with a short-lived, auto-rotated
|
||||
```
|
||||
Pod kube-apiserver / JWKS SeaweedFS S3 gateway
|
||||
| | |
|
||||
| 1. kubelet projects a SA token | |
|
||||
| 1. kubelet projects a SA token | |
|
||||
| (OIDC JWT, audience=X) | |
|
||||
|<---------------------------------| |
|
||||
| |
|
||||
@@ -30,7 +30,7 @@ Pod kube-apiserver / JWKS SeaweedFS S3 gatewa
|
||||
| 5. temporary {AccessKeyId, SecretAccessKey, SessionToken} |
|
||||
|<-------------------------------------------------------------------|
|
||||
| |
|
||||
| 6. normal S3 calls signed with the temporary credentials |
|
||||
| 6. normal S3 calls signed with the temporary credentials |
|
||||
|------------------------------------------------------------------->|
|
||||
```
|
||||
|
||||
|
||||
Reference in new issue
Block a user