{"action":"created","comment":{"url":"https://api.github.com/repos/istio/istio.github.io/pulls/comments/202104787","pull_request_review_id":136737722,"id":202104787,"node_id":"MDI0OlB1bGxSZXF1ZXN0UmV2aWV3Q29tbWVudDIwMjEwNDc4Nw==","diff_hunk":"@@ -4,3 +4,217 @@ description: 描述 Istio 的授权与认证功能。\n weight: 30\n type: section-index\n ---\n+\n+## 综述\n+\n+Istio 基于角色的访问控制（RBAC）为 Istio 网格中的服务提供命名空间级、服务级、方法级访问控制。它的特点:\n+* 基于角色的语义，它简单易用。\n+* 服务到服务以及用户端到服务的授权。\n+* 在角色和角色绑定中可以通过自定义属性保证灵活性。\n+\n+## 架构\n+\n+下面的图表显示了 Istio RBAC 体系结构。操作者可以指定 Istio RBAC 策略。策略则保存在 Istio 配置存储中。\n+\n+{{< image width=\"80%\" ratio=\"56.25%\"\n+    link=\"https://github.com/istio/istio.github.io/tree/master/content/docs/concepts/security/IstioRBAC.svg\"","path":"content_zh/docs/concepts/security/_index.md","position":17,"original_position":17,"commit_id":"ee1e9e157f9db55893a0bc205a54b5d6cc9755c5","original_commit_id":"ee1e9e157f9db55893a0bc205a54b5d6cc9755c5","user":{"login":"fleeto","id":6958477,"node_id":"MDQ6VXNlcjY5NTg0Nzc=","avatar_url":"https://avatars3.githubusercontent.com/u/6958477?v=4","gravatar_id":"","url":"https://api.github.com/users/fleeto","html_url":"https://github.com/fleeto","followers_url":"https://api.github.com/users/fleeto/followers","following_url":"https://api.github.com/users/fleeto/following{/other_user}","gists_url":"https://api.github.com/users/fleeto/gists{/gist_id}","starred_url":"https://api.github.com/users/fleeto/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fleeto/subscriptions","organizations_url":"https://api.github.com/users/fleeto/orgs","repos_url":"https://api.github.com/users/fleeto/repos","events_url":"https://api.github.com/users/fleeto/events{/privacy}","received_events_url":"https://api.github.com/users/fleeto/received_events","type":"User","site_admin":false},"body":"link=\"https://github.com/istio/istio.github.io/tree/master/content/docs/concepts/security/IstioRBAC.svg\"\r\n=>\r\nlink=\"/docs/concepts/security/IstioRBAC.svg\"\r\n","created_at":"2018-07-12T16:48:14Z","updated_at":"2018-07-12T16:48:14Z","html_url":"https://github.com/istio/istio.github.io/pull/1678#discussion_r202104787","pull_request_url":"https://api.github.com/repos/istio/istio.github.io/pulls/1678","author_association":"CONTRIBUTOR","_links":{"self":{"href":"https://api.github.com/repos/istio/istio.github.io/pulls/comments/202104787"},"html":{"href":"https://github.com/istio/istio.github.io/pull/1678#discussion_r202104787"},"pull_request":{"href":"https://api.github.com/repos/istio/istio.github.io/pulls/1678"}}},"pull_request":{"url":"https://api.github.com/repos/istio/istio.github.io/pulls/1678","id":199258572,"node_id":"MDExOlB1bGxSZXF1ZXN0MTk5MjU4NTcy","html_url":"https://github.com/istio/istio.github.io/pull/1678","diff_url":"https://github.com/istio/istio.github.io/pull/1678.diff","patch_url":"https://github.com/istio/istio.github.io/pull/1678.patch","issue_url":"https://api.github.com/repos/istio/istio.github.io/issues/1678","number":1678,"state":"open","locked":false,"title":"Translate security/_index into chinese","user":{"login":"xieydd","id":20329697,"node_id":"MDQ6VXNlcjIwMzI5Njk3","avatar_url":"https://avatars3.githubusercontent.com/u/20329697?v=4","gravatar_id":"","url":"https://api.github.com/users/xieydd","html_url":"https://github.com/xieydd","followers_url":"https://api.github.com/users/xieydd/followers","following_url":"https://api.github.com/users/xieydd/following{/other_user}","gists_url":"https://api.github.com/users/xieydd/gists{/gist_id}","starred_url":"https://api.github.com/users/xieydd/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/xieydd/subscriptions","organizations_url":"https://api.github.com/users/xieydd/orgs","repos_url":"https://api.github.com/users/xieydd/repos","events_url":"https://api.github.com/users/xieydd/events{/privacy}","received_events_url":"https://api.github.com/users/xieydd/received_events","type":"User","site_admin":false},"body":"Translated content/docs/concepts/security/_index.mdinto Chinese.","created_at":"2018-07-04T14:00:12Z","updated_at":"2018-07-12T16:48:14Z","closed_at":null,"merged_at":null,"merge_commit_sha":"54d59dfb7769f4aecde0dbbff5b439b3c1aa4cba","assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":884247475,"node_id":"MDU6TGFiZWw4ODQyNDc0NzU=","url":"https://api.github.com/repos/istio/istio.github.io/labels/cla:%20yes","name":"cla: yes","color":"bfdadc","default":false},{"id":985102886,"node_id":"MDU6TGFiZWw5ODUxMDI4ODY=","url":"https://api.github.com/repos/istio/istio.github.io/labels/translation-chinese","name":"translation-chinese","color":"675ed1","default":false}],"milestone":null,"commits_url":"https://api.github.com/repos/istio/istio.github.io/pulls/1678/commits","review_comments_url":"https://api.github.com/repos/istio/istio.github.io/pulls/1678/comments","review_comment_url":"https://api.github.com/repos/istio/istio.github.io/pulls/comments{/number}","comments_url":"https://api.github.com/repos/istio/istio.github.io/issues/1678/comments","statuses_url":"https://api.github.com/repos/istio/istio.github.io/statuses/ee1e9e157f9db55893a0bc205a54b5d6cc9755c5","head":{"label":"xieydd:master","ref":"master","sha":"ee1e9e157f9db55893a0bc205a54b5d6cc9755c5","user":{"login":"xieydd","id":20329697,"node_id":"MDQ6VXNlcjIwMzI5Njk3","avatar_url":"https://avatars3.githubusercontent.com/u/20329697?v=4","gravatar_id":"","url":"https://api.github.com/users/xieydd","html_url":"https://github.com/xieydd","followers_url":"https://api.github.com/users/xieydd/followers","following_url":"https://api.github.com/users/xieydd/following{/other_user}","gists_url":"https://api.github.com/users/xieydd/gists{/gist_id}","starred_url":"https://api.github.com/users/xieydd/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/xieydd/subscriptions","organizations_url":"https://api.github.com/users/xieydd/orgs","repos_url":"https://api.github.com/users/xieydd/repos","events_url":"https://api.github.com/users/xieydd/events{/privacy}","received_events_url":"https://api.github.com/users/xieydd/received_events","type":"User","site_admin":false},"repo":{"id":138245836,"node_id":"MDEwOlJlcG9zaXRvcnkxMzgyNDU4MzY=","name":"istio.github.io","full_name":"xieydd/istio.github.io","owner":{"login":"xieydd","id":20329697,"node_id":"MDQ6VXNlcjIwMzI5Njk3","avatar_url":"https://avatars3.githubusercontent.com/u/20329697?v=4","gravatar_id":"","url":"https://api.github.com/users/xieydd","html_url":"https://github.com/xieydd","followers_url":"https://api.github.com/users/xieydd/followers","following_url":"https://api.github.com/users/xieydd/following{/other_user}","gists_url":"https://api.github.com/users/xieydd/gists{/gist_id}","starred_url":"https://api.github.com/users/xieydd/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/xieydd/subscriptions","organizations_url":"https://api.github.com/users/xieydd/orgs","repos_url":"https://api.github.com/users/xieydd/repos","events_url":"https://api.github.com/users/xieydd/events{/privacy}","received_events_url":"https://api.github.com/users/xieydd/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/xieydd/istio.github.io","description":"Source for the istio.io site","fork":true,"url":"https://api.github.com/repos/xieydd/istio.github.io","forks_url":"https://api.github.com/repos/xieydd/istio.github.io/forks","keys_url":"https://api.github.com/repos/xieydd/istio.github.io/keys{/key_id}","collaborators_url":"https://api.github.com/repos/xieydd/istio.github.io/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/xieydd/istio.github.io/teams","hooks_url":"https://api.github.com/repos/xieydd/istio.github.io/hooks","issue_events_url":"https://api.github.com/repos/xieydd/istio.github.io/issues/events{/number}","events_url":"https://api.github.com/repos/xieydd/istio.github.io/events","assignees_url":"https://api.github.com/repos/xieydd/istio.github.io/assignees{/user}","branches_url":"https://api.github.com/repos/xieydd/istio.github.io/branches{/branch}","tags_url":"https://api.github.com/repos/xieydd/istio.github.io/tags","blobs_url":"https://api.github.com/repos/xieydd/istio.github.io/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/xieydd/istio.github.io/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/xieydd/istio.github.io/git/refs{/sha}","trees_url":"https://api.github.com/repos/xieydd/istio.github.io/git/trees{/sha}","statuses_url":"https://api.github.com/repos/xieydd/istio.github.io/statuses/{sha}","languages_url":"https://api.github.com/repos/xieydd/istio.github.io/languages","stargazers_url":"https://api.github.com/repos/xieydd/istio.github.io/stargazers","contributors_url":"https://api.github.com/repos/xieydd/istio.github.io/contributors","subscribers_url":"https://api.github.com/repos/xieydd/istio.github.io/subscribers","subscription_url":"https://api.github.com/repos/xieydd/istio.github.io/subscription","commits_url":"https://api.github.com/repos/xieydd/istio.github.io/commits{/sha}","git_commits_url":"https://api.github.com/repos/xieydd/istio.github.io/git/commits{/sha}","comments_url":"https://api.github.com/repos/xieydd/istio.github.io/comments{/number}","issue_comment_url":"https://api.github.com/repos/xieydd/istio.github.io/issues/comments{/number}","contents_url":"https://api.github.com/repos/xieydd/istio.github.io/contents/{+path}","compare_url":"https://api.github.com/repos/xieydd/istio.github.io/compare/{base}...{head}","merges_url":"https://api.github.com/repos/xieydd/istio.github.io/merges","archive_url":"https://api.github.com/repos/xieydd/istio.github.io/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/xieydd/istio.github.io/downloads","issues_url":"https://api.github.com/repos/xieydd/istio.github.io/issues{/number}","pulls_url":"https://api.github.com/repos/xieydd/istio.github.io/pulls{/number}","milestones_url":"https://api.github.com/repos/xieydd/istio.github.io/milestones{/number}","notifications_url":"https://api.github.com/repos/xieydd/istio.github.io/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/xieydd/istio.github.io/labels{/name}","releases_url":"https://api.github.com/repos/xieydd/istio.github.io/releases{/id}","deployments_url":"https://api.github.com/repos/xieydd/istio.github.io/deployments","created_at":"2018-06-22T02:39:08Z","updated_at":"2018-07-12T16:39:49Z","pushed_at":"2018-07-12T16:39:47Z","git_url":"git://github.com/xieydd/istio.github.io.git","ssh_url":"git@github.com:xieydd/istio.github.io.git","clone_url":"https://github.com/xieydd/istio.github.io.git","svn_url":"https://github.com/xieydd/istio.github.io","homepage":"https://istio.io/","size":23365,"stargazers_count":0,"watchers_count":0,"language":"HTML","has_issues":false,"has_projects":true,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":0,"license":{"key":"apache-2.0","name":"Apache License 2.0","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0","node_id":"MDc6TGljZW5zZTI="},"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"istio:master","ref":"master","sha":"818e23232df6b9e9d0382784e669cfff786b7653","user":{"login":"istio","id":23534644,"node_id":"MDEyOk9yZ2FuaXphdGlvbjIzNTM0NjQ0","avatar_url":"https://avatars1.githubusercontent.com/u/23534644?v=4","gravatar_id":"","url":"https://api.github.com/users/istio","html_url":"https://github.com/istio","followers_url":"https://api.github.com/users/istio/followers","following_url":"https://api.github.com/users/istio/following{/other_user}","gists_url":"https://api.github.com/users/istio/gists{/gist_id}","starred_url":"https://api.github.com/users/istio/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/istio/subscriptions","organizations_url":"https://api.github.com/users/istio/orgs","repos_url":"https://api.github.com/users/istio/repos","events_url":"https://api.github.com/users/istio/events{/privacy}","received_events_url":"https://api.github.com/users/istio/received_events","type":"Organization","site_admin":false},"repo":{"id":82706976,"node_id":"MDEwOlJlcG9zaXRvcnk4MjcwNjk3Ng==","name":"istio.github.io","full_name":"istio/istio.github.io","owner":{"login":"istio","id":23534644,"node_id":"MDEyOk9yZ2FuaXphdGlvbjIzNTM0NjQ0","avatar_url":"https://avatars1.githubusercontent.com/u/23534644?v=4","gravatar_id":"","url":"https://api.github.com/users/istio","html_url":"https://github.com/istio","followers_url":"https://api.github.com/users/istio/followers","following_url":"https://api.github.com/users/istio/following{/other_user}","gists_url":"https://api.github.com/users/istio/gists{/gist_id}","starred_url":"https://api.github.com/users/istio/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/istio/subscriptions","organizations_url":"https://api.github.com/users/istio/orgs","repos_url":"https://api.github.com/users/istio/repos","events_url":"https://api.github.com/users/istio/events{/privacy}","received_events_url":"https://api.github.com/users/istio/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/istio/istio.github.io","description":"Source for the istio.io site","fork":false,"url":"https://api.github.com/repos/istio/istio.github.io","forks_url":"https://api.github.com/repos/istio/istio.github.io/forks","keys_url":"https://api.github.com/repos/istio/istio.github.io/keys{/key_id}","collaborators_url":"https://api.github.com/repos/istio/istio.github.io/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/istio/istio.github.io/teams","hooks_url":"https://api.github.com/repos/istio/istio.github.io/hooks","issue_events_url":"https://api.github.com/repos/istio/istio.github.io/issues/events{/number}","events_url":"https://api.github.com/repos/istio/istio.github.io/events","assignees_url":"https://api.github.com/repos/istio/istio.github.io/assignees{/user}","branches_url":"https://api.github.com/repos/istio/istio.github.io/branches{/branch}","tags_url":"https://api.github.com/repos/istio/istio.github.io/tags","blobs_url":"https://api.github.com/repos/istio/istio.github.io/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/istio/istio.github.io/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/istio/istio.github.io/git/refs{/sha}","trees_url":"https://api.github.com/repos/istio/istio.github.io/git/trees{/sha}","statuses_url":"https://api.github.com/repos/istio/istio.github.io/statuses/{sha}","languages_url":"https://api.github.com/repos/istio/istio.github.io/languages","stargazers_url":"https://api.github.com/repos/istio/istio.github.io/stargazers","contributors_url":"https://api.github.com/repos/istio/istio.github.io/contributors","subscribers_url":"https://api.github.com/repos/istio/istio.github.io/subscribers","subscription_url":"https://api.github.com/repos/istio/istio.github.io/subscription","commits_url":"https://api.github.com/repos/istio/istio.github.io/commits{/sha}","git_commits_url":"https://api.github.com/repos/istio/istio.github.io/git/commits{/sha}","comments_url":"https://api.github.com/repos/istio/istio.github.io/comments{/number}","issue_comment_url":"https://api.github.com/repos/istio/istio.github.io/issues/comments{/number}","contents_url":"https://api.github.com/repos/istio/istio.github.io/contents/{+path}","compare_url":"https://api.github.com/repos/istio/istio.github.io/compare/{base}...{head}","merges_url":"https://api.github.com/repos/istio/istio.github.io/merges","archive_url":"https://api.github.com/repos/istio/istio.github.io/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/istio/istio.github.io/downloads","issues_url":"https://api.github.com/repos/istio/istio.github.io/issues{/number}","pulls_url":"https://api.github.com/repos/istio/istio.github.io/pulls{/number}","milestones_url":"https://api.github.com/repos/istio/istio.github.io/milestones{/number}","notifications_url":"https://api.github.com/repos/istio/istio.github.io/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/istio/istio.github.io/labels{/name}","releases_url":"https://api.github.com/repos/istio/istio.github.io/releases{/id}","deployments_url":"https://api.github.com/repos/istio/istio.github.io/deployments","created_at":"2017-02-21T17:19:49Z","updated_at":"2018-07-12T15:00:46Z","pushed_at":"2018-07-12T16:45:43Z","git_url":"git://github.com/istio/istio.github.io.git","ssh_url":"git@github.com:istio/istio.github.io.git","clone_url":"https://github.com/istio/istio.github.io.git","svn_url":"https://github.com/istio/istio.github.io","homepage":"https://istio.io/","size":23592,"stargazers_count":74,"watchers_count":74,"language":"HTML","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":true,"forks_count":254,"mirror_url":null,"archived":false,"open_issues_count":92,"license":{"key":"apache-2.0","name":"Apache License 2.0","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0","node_id":"MDc6TGljZW5zZTI="},"forks":254,"open_issues":92,"watchers":74,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/istio/istio.github.io/pulls/1678"},"html":{"href":"https://github.com/istio/istio.github.io/pull/1678"},"issue":{"href":"https://api.github.com/repos/istio/istio.github.io/issues/1678"},"comments":{"href":"https://api.github.com/repos/istio/istio.github.io/issues/1678/comments"},"review_comments":{"href":"https://api.github.com/repos/istio/istio.github.io/pulls/1678/comments"},"review_comment":{"href":"https://api.github.com/repos/istio/istio.github.io/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/istio/istio.github.io/pulls/1678/commits"},"statuses":{"href":"https://api.github.com/repos/istio/istio.github.io/statuses/ee1e9e157f9db55893a0bc205a54b5d6cc9755c5"}},"author_association":"NONE"}}
{"actor":{"display_login":"fleeto"}}