-
Notifications
You must be signed in to change notification settings - Fork 1.6k
zh-translation: /faq/security #5400
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Hi @gorda. Thanks for your PR. I'm waiting for a istio member to verify that this patch is reasonable to test. If it is, they should reply with Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
/ok-to-test |
weight: 20 | ||
--- | ||
|
||
[Authentication policy](/docs/concepts/security/#authentication-policies) can be mesh-wide (which affects all services in the mesh), namespace-wide | ||
(all services in the same namespace) or service specific. You can have policy or policies to setup mutual TLS for services in a cluster in any way as you want. | ||
[认证策略](/zh/docs/concepts/security/#authentication-policies) 可以配置为 mesh-wide(影响网络中的所有服务)、namespace-wide(命令空间中的所有服务)或某个特定服务。 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
命令空间 -> namespace,保留英文原文即可
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
已修改
[task](/docs/tasks/security/authn-policy) for more details. | ||
非 Istio 服务无法与 Istio 服务通信。除非它能出示有效证书,但这基本不可能。 | ||
这是 *双向 TLS 认证* 的预期表现。 | ||
但是,您可以为特定的命名空间或服务重写全局标志。详见:[任务](/zh/docs/tasks/security/authn-policy) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
命名空间保留英文 namespace 原文。
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
已修改
/reset |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/LGTM
refs: