Files
rancher-docs/zh/pages-for-subheaders/authentication-config.html
T

26 lines
78 KiB
HTML
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
<!doctype html>
<html lang="zh" dir="ltr" class="docs-wrapper docs-doc-page docs-version-current plugin-docs plugin-id-default docs-doc-id-pages-for-subheaders/authentication-config">
<head>
<meta charset="UTF-8">
<meta name="generator" content="Docusaurus v2.3.1">
<title data-rh="true">身份验证配置 | Rancher</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://ranchermanager.docs.rancher.com/zh/pages-for-subheaders/authentication-config"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="身份验证配置 | Rancher"><meta data-rh="true" name="description" content="Rancher 向 Kubernetes 添加的关键功能之一,就是集中式用户身份验证。此功能允许你的用户使用一组凭证对你的所有 Kubernetes 集群进行身份验证。"><meta data-rh="true" property="og:description" content="Rancher 向 Kubernetes 添加的关键功能之一,就是集中式用户身份验证。此功能允许你的用户使用一组凭证对你的所有 Kubernetes 集群进行身份验证。"><link data-rh="true" rel="icon" href="/zh/img/favicon.png"><link data-rh="true" rel="canonical" href="https://ranchermanager.docs.rancher.com/zh/pages-for-subheaders/authentication-config"><link data-rh="true" rel="alternate" href="https://ranchermanager.docs.rancher.com/pages-for-subheaders/authentication-config" hreflang="en"><link data-rh="true" rel="alternate" href="https://ranchermanager.docs.rancher.com/zh/pages-for-subheaders/authentication-config" hreflang="zh"><link data-rh="true" rel="alternate" href="https://ranchermanager.docs.rancher.com/pages-for-subheaders/authentication-config" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://30NEY6C9UY-dsn.algolia.net" crossorigin="anonymous"><link rel="preconnect" href="https://www.googletagmanager.com">
<script>window.dataLayer=window.dataLayer||[]</script>
<script>!function(e,t,a,n,g){e[n]=e[n]||[],e[n].push({"gtm.start":(new Date).getTime(),event:"gtm.js"});var m=t.getElementsByTagName(a)[0],r=t.createElement(a);r.async=!0,r.src="https://www.googletagmanager.com/gtm.js?id=GTM-57KS2MW",m.parentNode.insertBefore(r,m)}(window,document,"script","dataLayer")</script>
<link rel="search" type="application/opensearchdescription+xml" title="Rancher" href="/zh/opensearch.xml">
<script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" charset="UTF-8" data-domain-script="0f98beb0-fc4c-417d-a42e-564e2cae42d2" async></script>
<script src="/scripts/optanonwrapper.js" async></script><link rel="stylesheet" href="/zh/assets/css/styles.10402cb5.css">
<link rel="preload" href="/zh/assets/js/runtime~main.9a7dea44.js" as="script">
<link rel="preload" href="/zh/assets/js/main.50802f1f.js" as="script">
</head>
<body class="navigation-with-keyboard">
<noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-57KS2MW" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
<script>!function(){function t(t){document.documentElement.setAttribute("data-theme",t)}var e=function(){var t=null;try{t=localStorage.getItem("theme")}catch(t){}return t}();t(null!==e?e:"light")}()</script><div id="__docusaurus">
<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="切换导航栏" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/rancher-logo-horiz-color.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/rancher-logo-horiz-color.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a><div class="navbar__item dropdown dropdown--hoverable"><a aria-current="page" class="navbar__link active" aria-haspopup="true" aria-expanded="false" role="button" href="/zh/">Latest</a><ul class="dropdown__menu"><li><a aria-current="page" class="dropdown__link dropdown__link--active" href="/zh/pages-for-subheaders/authentication-config">Latest</a></li><li><a class="dropdown__link" href="/zh/v2.7/pages-for-subheaders/authentication-config">v2.7</a></li><li><a class="dropdown__link" href="/zh/v2.6/pages-for-subheaders/authentication-config">v2.6</a></li><li><a class="dropdown__link" href="/zh/v2.5/pages-for-subheaders/authentication-config">v2.5</a></li><li><a class="dropdown__link" href="/zh/v2.0-v2.4/pages-for-subheaders/authentication-config">v2.0-v2.4</a></li><li><a class="dropdown__link" href="/zh/versions">All versions</a></li></ul></div></div><div class="navbar__items navbar__items--right"><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/pages-for-subheaders/authentication-config" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/pages-for-subheaders/authentication-config" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li></ul></div><a href="https://github.com/rancher/rancher-docs" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github">GitHub<svg width="13.5" height="13.5" aria-hidden="true" viewBox="0 0 24 24" class="iconExternalLink_nPIU"><path fill="currentColor" d="M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"></path></svg></a><a href="https://www.rancher.com" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link">Rancher 主页<svg width="13.5" height="13.5" aria-hidden="true" viewBox="0 0 24 24" class="iconExternalLink_nPIU"><path fill="currentColor" d="M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"></path></svg></a><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">什么是 Rancher?</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--sublist-caret" aria-expanded="false" href="/zh/getting-started/overview">开始使用</a></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--sublist-caret menu__link--active" aria-expanded="true" href="/zh/pages-for-subheaders/new-user-guides">操作指南</a></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-2 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" tabindex="0" href="/zh/pages-for-subheaders/new-user-guides">新用户指南</a><button aria-label="打开/收起侧边栏菜单「新用户指南」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" tabindex="0" href="/zh/pages-for-subheaders/authentication-permissions-and-global-configuration">身份验证、权限和全局配置</a><button aria-label="打开/收起侧边栏菜单「身份验证、权限和全局配置」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-4 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" tabindex="0" href="/zh/pages-for-subheaders/authentication-config">身份验证配置</a><button aria-label="打开/收起侧边栏菜单「身份验证配置」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-5 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/manage-users-and-groups">用户和组</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-5 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/create-local-users">本地身份验证</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-5 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-google-oauth">配置 Google OAuth</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-5 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-active-directory">配置 Active Directory (AD)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-5 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-freeipa">配置 FreeIPA</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-5 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-azure-ad">配置 Azure AD</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-5 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-github">配置 GitHub</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-5 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-keycloak-oidc">配置 Keycloak (OIDC)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-5 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-keycloak-saml">配置 Keycloak (SAML)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-5 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-pingidentity">配置 PingIdentity (SAML)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-5 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-okta-saml">配置 Okta (SAML)</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-4 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/zh/pages-for-subheaders/configure-openldap">配置 OpenLDAP</a><button aria-label="打开/收起侧边栏菜单「配置 OpenLDAP」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-4 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/zh/pages-for-subheaders/configure-microsoft-ad-federation-service-saml">配置 Microsoft AD FS (SAML)</a><button aria-label="打开/收起侧边栏菜单「配置 Microsoft AD FS (SAML)」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-4 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/zh/pages-for-subheaders/configure-shibboleth-saml">配置 Shibboleth (SAML)</a><button aria-label="打开/收起侧边栏菜单「配置 Shibboleth (SAML)」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-4 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/zh/pages-for-subheaders/manage-role-based-access-control-rbac">管理 RBAC</a><button aria-label="打开/收起侧边栏菜单「管理 RBAC」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-4 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/zh/pages-for-subheaders/about-provisioning-drivers">关于 Provisioning 驱动</a><button aria-label="打开/收起侧边栏菜单「关于 Provisioning 驱动」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-4 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/zh/pages-for-subheaders/about-rke1-templates">关于 RKE1 模板</a><button aria-label="打开/收起侧边栏菜单「关于 RKE1 模板」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-4 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/create-pod-security-policies">Pod 安全策略</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-4 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/pod-security-standards">Pod 安全标准 (PSS) 和 Pod 安全准入 (PSA)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-4 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/psa-config-templates">Pod 安全准入 (PSA) 配置模板</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-4 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/global-default-private-registry">配置全局默认私有镜像仓库</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-4 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/custom-branding">定制品牌</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/zh/pages-for-subheaders/manage-clusters">管理集群</a><button aria-label="打开/收起侧边栏菜单「管理集群」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/zh/pages-for-subheaders/kubernetes-cluster-setup">Kubernetes 集群设置</a><button aria-label="打开/收起侧边栏菜单「Kubernetes 集群设置」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/zh/pages-for-subheaders/infrastructure-setup">基础设施设置</a><button aria-label="打开/收起侧边栏菜单「基础设施设置」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/zh/pages-for-subheaders/kubernetes-clusters-in-rancher-setup">Rancher 设置中的 Kubernetes 集群</a><button aria-label="打开/收起侧边栏菜单「Rancher 设置中的 Kubernetes 集群」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/zh/pages-for-subheaders/launch-kubernetes-with-rancher">使用 Rancher 启动 Kubernetes</a><button aria-label="打开/收起侧边栏菜单「使用 Rancher 启动 Kubernetes」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/zh/pages-for-subheaders/kubernetes-resources-setup">Kubernetes 资源设置</a><button aria-label="打开/收起侧边栏菜单「Kubernetes 资源设置」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/zh/pages-for-subheaders/helm-charts-in-rancher">Rancher 中的 Helm Chart</a><button aria-label="打开/收起侧边栏菜单「Rancher 中的 Helm Chart」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/zh/pages-for-subheaders/deploy-apps-across-clusters">跨集群部署应用</a><button aria-label="打开/收起侧边栏菜单「跨集群部署应用」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-3 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/zh/pages-for-subheaders/backup-restore-and-disaster-recovery">备份、还原和灾难恢复</a><button aria-label="打开/收起侧边栏菜单「备份、还原和灾难恢复」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-3 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/how-to-guides/new-user-guides/add-users-to-projects">添加项目成员</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-3 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/how-to-guides/new-user-guides/manage-namespaces">命名空间</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-2 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" tabindex="0" href="/zh/pages-for-subheaders/advanced-user-guides">高级用户指南</a><button aria-label="打开/收起侧边栏菜单「高级用户指南」" type="button" class="clean-btn menu__caret"></button></div></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--sublist-caret" aria-expanded="false" href="/zh/pages-for-subheaders/best-practices">参考指南</a></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--sublist-caret" aria-expanded="false" href="/zh/pages-for-subheaders/cloud-marketplace">Rancher 中的集成</a></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--sublist-caret" aria-expanded="false" href="/zh/faq/general-faq">常见问题</a></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--sublist-caret" aria-expanded="false" href="/zh/troubleshooting/general-troubleshooting">故障排除</a></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/contribute-to-rancher">参与 Rancher 社区贡献</a></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li class="breadcrumbs__item"><span class="breadcrumbs__link">操作指南</span><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/pages-for-subheaders/new-user-guides"><span itemprop="name">新用户指南</span></a><meta itemprop="position" content="2"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/pages-for-subheaders/authentication-permissions-and-global-configuration"><span itemprop="name">身份验证、权限和全局配置</span></a><meta itemprop="position" content="3"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">身份验证配置</span><meta itemprop="position" content="4"></li></ul></nav><span class="theme-doc-version-badge badge badge--secondary">版本:Latest</span><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>身份验证配置</h1></header><p>Rancher 向 Kubernetes 添加的关键功能之一,就是集中式用户身份验证。此功能允许你的用户使用一组凭证对你的所有 Kubernetes 集群进行身份验证。</p><p>这种集中式的用户身份验证是使用 Rancher 身份验证代理完成的,该代理与 Rancher 的其他组件一起安装。这个代理验证你的用户,并使用一个 ServiceAccount 将用户请求转发到你的 Kubernetes 集群。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="外部验证与本地验证">外部验证与本地验证<a href="#外部验证与本地验证" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>Rancher 身份验证代理支持与以下外部身份验证服务集成:</p><table><thead><tr><th>验证服务</th></tr></thead><tbody><tr><td><a href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-active-directory">Microsoft Active Directory</a></td></tr><tr><td><a href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-github">GitHub</a></td></tr><tr><td><a href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-azure-ad">Microsoft Azure AD</a></td></tr><tr><td><a href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-freeipa">FreeIPA</a></td></tr><tr><td><a href="/zh/pages-for-subheaders/configure-openldap">OpenLDAP</a></td></tr><tr><td><a href="/zh/pages-for-subheaders/configure-microsoft-ad-federation-service-saml">Microsoft AD FS</a></td></tr><tr><td><a href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-pingidentity">PingIdentity</a></td></tr><tr><td><a href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-keycloak-oidc">Keycloak (OIDC)</a></td></tr><tr><td><a href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-keycloak-saml">Keycloak (SAML)</a></td></tr><tr><td><a href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-okta-saml">Okta</a></td></tr><tr><td><a href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-google-oauth">Google OAuth</a></td></tr><tr><td><a href="/zh/pages-for-subheaders/configure-shibboleth-saml">Shibboleth</a></td></tr></tbody></table><p>同时,Rancher 也提供了<a href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/create-local-users">本地身份验证</a>。</p><p>大多数情况下,应该使用外部身份验证服务,而不是本地身份验证,因为外部身份验证允许对用户进行集中管理。但是你可能需要一些本地身份验证用户,以便在特定的情况下(例如在外部身份验证系统不可用或正在进行维护时)管理 Rancher。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="用户和组">用户和组<a href="#用户和组" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>Rancher 依赖用户和组来决定允许登录到 Rancher 的用户,以及他们可以访问哪些资源。使用外部系统进行身份验证时,将由外部系统提供用户和组。这些用户和组被赋予集群、项目、多集群应用、全局 DNS 提供商等资源的特定角色。当你将访问权限授予某个组时,身份验证提供程序中属于该组的所有用户都将能够使用你指定的权限访问该资源。有关角色和权限的更多信息,请参见 <a href="/zh/pages-for-subheaders/manage-role-based-access-control-rbac">RBAC</a>。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>本地认证不支持创建或管理用户组。</p></div></div><p>详情请参见<a href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/manage-users-and-groups">用户和组</a>。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="rancher-授权范围">Rancher 授权范围<a href="#rancher-授权范围" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>将 Rancher 配置成允许使用外部验证提供程序登录后,你需要配置允许登录和使用 Rancher 的用户。可用选项如下:</p><table><thead><tr><th>访问级别</th><th>描述</th></tr></thead><tbody><tr><td>允许任何有效用户</td><td>授权服务中的 <em>任何</em> 用户都可以访问Rancher。通常不建议使用此设置。</td></tr><tr><td>允许集群和项目成员,以及授权的用户和组织</td><td>认证服务中的任何用户,以及添加为<strong>集群成员</strong>或<strong>项目成员</strong>的任何组都可以登录到 Rancher。此外,添加到<strong>授权用户和组织</strong>列表中的身份验证服务中的任何用户和组都能登录到 Rancher。</td></tr><tr><td>仅允许授权用户和组织</td><td>只有添加到<strong>授权用户和组织</strong>的身份验证服务中的用户和组能登录 Rancher。</td></tr></tbody></table><p>要在授权服务中为用户设置 Rancher 访问级别,请执行以下步骤:</p><ol><li>在左上角,单击 <strong>☰ &gt; 用户 &amp; 认证</strong>。</li><li>单击左侧导航栏的<strong>认证</strong>。</li><li>设置好认证提供程序的配置后,使用 <strong>Site Access</strong> 选项来配置用户的授权范围。上表说明了每个选项的访问级别。</li><li>可选:如果你选择<strong>允许任何有效用户</strong>以外的选项,你可以通过在显示的文本字段中搜索用户,将用户添加到<strong>授权用户和组织</strong>的列表中。</li><li>单击<strong>保存</strong>。</li></ol><p><strong>结果</strong>:Rancher 访问配置已应用。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>SAML 身份提供商注意事项</div><div class="admonitionContent_S0QG"><ul><li>SAML 协议不支持搜索或查找用户或组。因此,将用户或组添加到 Rancher 时不会对其进行验证。</li><li>添加用户时,必须正确输入确切的用户 ID(即 <code>UID</code> 字段)。键入用户 ID 时,将不会搜索可能匹配的其他用户 ID。</li><li>添加组时,必须从文本框旁边的下拉列表中选择组。Rancher 假定来自文本框的任何输入都是用户。</li><li>用户组下拉列表仅显示你所属的用户组。如果你不是某个组的成员,你将无法添加该组。</li></ul></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="外部身份验证配置和用户主体">外部身份验证配置和用户主体<a href="#外部身份验证配置和用户主体" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>配置外部认证需要:</p><ul><li>分配了管理员角色的本地用户,以下称为 <em>本地主体</em>。</li><li>可以使用外部认证服务进行认证的外部用户,以下称为 <em>外部主体</em>。</li></ul><p>外部身份验证的配置将影响 Rancher 中主体用户的管理方式。按照下面的列表来更好地理解这些影响。</p><ol><li><p>作为本地主体登录到 Rancher 并完成外部身份验证的配置。</p><p><img loading="lazy" alt="Sign In" src="/zh/assets/images/sign-in-f314d4617d171cee6ff47132b18c7be9.png" width="503" height="150" class="img_ev3q"></p></li><li><p>Rancher 将外部主体与本地主体相关联。这两个用户共享本地主体的用户 ID。</p><p><img loading="lazy" alt="Principal ID Sharing" src="data:image/png;base64,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" width="272" height="171" class="img_ev3q"></p></li><li><p>完成配置后,Rancher 将自动退出本地主体。</p><p><img loading="lazy" alt="Sign Out Local Principal" src="data:image/png;base64,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" width="513" height="84" class="img_ev3q"></p></li><li><p>然后,Rancher 会自动将你作为外部主体重新登录。</p><p><img loading="lazy" alt="Sign In External Principal" src="data:image/png;base64,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" width="520" height="84" class="img_ev3q"></p></li><li><p>由于外部主体与本地主体共享一个 ID,因此<strong>用户</strong>页面不会再单独显示外部主体的对象。</p><p><img loading="lazy" alt="Sign In External Principal" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAhEAAADzCAYAAAA4jUSyAAAblElEQVR42u3df0zUd57H8ebu/8sll7tkc9m/bi+3l/pHs2tTtya7uT8ku+sml2yTvZrUre5209ZW17jqJq170nXrrdrdFrVWLFa0lk6LjiAnFBSxh3REhVEBsTAMzBQYfoxMB+YrzDD4vu/n+/3OL4bhh6Id4flIXgFmPt+BmX7L98X38/mOjz322GN39QghhBBCyByi+sNjAgAAMBdWkaBEAAAASgQAAKBEAAAASgQAAKBEAAAAUCIAAAAlAgAAUCIAAAAlAgAAUCLmIDTgE5/XJ6HIDAMj2uzGAQCAxVAiNCl+5nlZ+pPn5fh1bZpx41K96ZezGAcAABZNiah42SwHxc3atONKZjUOAABQIu5pHAAAoERQIgAAoEQ8kBIx7JPqwgPy0jMvGLcv/ckLsnbNa7J7f7l4htO3d5YVyUtrYmOfl5Vq7KGz4hkYTx067JaS/QfkA1uT8eVQxy2ptp+Sw3sKpd5rjg15m6T4zVxZaa3nWKr/DGtfzpUP7E4Jsa8AAJDFJSLilh1WGYgdxFcmff1B8uJLzS15zySP/a1eNhJlQqUk6XuHm4vjpWTrptRx6nHDHVUpt618JnnMC+LkRAkAANlbIuIH+p8fEM9w4kxCWAuK6/MqcXpjjzUu1X/4pTU2L+l29ZA+qd7zmnXwf02c1tmLcNuplJKwdluRXLzqFl+PX8IREVehuc3aPTUSmrAeS/8YHvZJfVmN+LgEFQCAbC4R5oH+yU3lEp7u4XvqrDMUueLKcHCv/oN5JmF3pS+tROwu86aN99jMErH1pJu9AgCAR61EiLcmcbZgzR4pOd8kvoH07WNlY+WbdRKeGJfQsJaScGRcfJ8XGmNeOnIrpUQ8+fOiKdc3+Crzks5SFEr11VsypI2zhwAA8EiUCHUwd5yStcnrIoz1DrlS8nniDMHkqYnpsjZ/Uol4+VSGsxzj4rTlpW+/6YDUtwXZUwAAeFglomSObzZV0aalHNB9zU1ScehASqGYfFZh5aZCqSgrlwp7htiKpfpq6nTGk8+fmn6qJBIU19U6Ob4nN6VMcAkqAAAPpUSIOA/9Nj7lkEniiojXxJXxGD0unsoDKVMR4Y5yqxAUT18Ikr/XbEtEsolgfJHm2v1N7C0AADyMEhE70BuLFQ9dTvsHtkJtdbLVuv/JbTXGgT3c0yTVX3jTD/LDTmsh5R7xGI8TlOPW5Z1r99clrqaYVD5CSWsaZioRvqs14uxIn7YIOQqtxZ5nZ18+AACgRMzP2Yj4+zNsy5WXNuXK1jXJ6w5eE2fAOtA3F1m3/VZ27ymSirIqqThSKC/FykbSgTzcUZP0HhIvyI79xVKtjy85UiSH9+wxpkF+Zq2HmE2JcB2y3hdiTa7kHTplPFbx/j3x77G1zMfeAgDAwyoRxl/4jlPxEjA5L+0pF1/yNMawW45ve23KsStfPiA3A5MePOCW4jdfy7iockfSpZyxqZNMCyvVmZEdk96sKvFznpWhCXYWAAAeaomIH6R7fOJp84qnQ8UnoenWKU5oxnhfhzl+KDDDokYtGB/r07cL6ePD93rQ1zTjMWb1cwIAQIl4jFcCAABQIgAAACUCAABQIgAAACUCAABQIigRAACAEgEAACgRAACAEgEAACgRAAAAlAgAAECJAAAAlAgAAECJAAAAlAgAAABKBAAAoEQAAABKBAAAoEQAAABKBAAAACUCAABQIgAAwAIsEf6vg4QQQghZ4KFEEEIIISR7SgQAAGA6AwAAgBIBAAAoEQAAgBIBAAAoEQAAgBIBAABAiQAAAJQIAABAiQAAAJQIAABAiQAAAKBEAAAASgQAAKBEAAAASgQAAKBEAAAAZFGJ2FLaIH+zxUbuM+p1BABgUZUICsD8BQAASgShRAAAKBGUCEoEAIASQYmgRAAAQImgRAAAQIkglAgAACViceXv/tsu2yuuyft1bfLHyuvyD7l2SgQAgBIx7yUir1Gq3X6pc/dLg1d99Im9tkmWzfVgW+CRMYlK0eFvvkTs/79bcveuyOh41PhYWO+iRAAAKBHzXiJs6uAvMhaOSHBUz3jsESJiL6uac4mw22Z7cK4Ru15e7FU181Ic/lDulA8c7UZiJn+u8mbVjXksERFpOvuRvPXhJf2zKQw0yr73M9wHAMAjXyJiB/+85GJxS9rD5kHyg8MPqETkuY3y4r0yPyWirqNftPD4jHF+dXt+SsRotxSvXyE5OTmSs75iyqIQcRVLzopi0dQXE/2Sv3WfdI+y8wMAFlqJsGU4yN9sjN+2ssoj7VpUPyDqd4xHpd3tkZXTPM5Op1+C4+b4sfCo1F1rsu5zSN1I1Pg5x0Yj4u3zJR5HnaHwBmVMfQ+13Uhw1mcr/uV/yjKuf/j77Xb51z//77xNZxgFYes56W4rlZznSqcuEV79vhXWfRPdsipnvXRG2fkBAAu9RGypkjr1V/Ntj/H1siqfedAfGRL7FbfYXUGjZMjt7ikfZ2dryBg/4OuXoi/cUtdnHmaNUpLXJHU+8/6xQFAaXLEyUiXVAXVrVJr12z64okqL+XV52czPRU3HHK13yb/vPiP/9MYp+Y8D54zysOStcnm75qb5umz9ZF7XRKQUhUz3Rbol3zprseq5VbKvqtu4P+Sqld+pMxlW9p1psh4nIrXvviUfnSmN37/+/XNy6Wy+/vkq4+vcT5uYJgEASkS2lgib2Aej8RJR1Kd/rvWnjjnvNw7wxrYpj+OQ9gmRoKsxZfzbXnVWIii/STrT0Z48nVFgrs+om1QY6tTUyqBn1iXir3ph+K+jtXKzLyA/OXTeuErjGy0R6vOBRlmlF4DGPk0iqpx93WgUglqvZg7WX1s1PZJ7odsoERWqdKzYJ53DYkyd5Ksy8W6taBH1WJeMbb9kagQAKBHZWSKuGEVgrM9tHshHrAe2pidkwvqoSysReTdlwBo+phZqWtMfpqBsSCoM7deuxL/nsvP98Z8/Np0hsYWetx/tEiGRTlmfs16+tAb2X8iVnPXF8qWrU5qam4yPjZ+ut8ZHpHT1Cil2xR5VLxX616Xe2NeafLT6d9JEiQAASkRWlIhJCyi3Xg8aj9Nw3rxCw35bnYnwy86yJnn7/E0rTbJTz8q0MmIWkKDXLVuTx1fpn1ddMS8ftcVKhCPtSpGGK02ytepmfLud+uc77TULo0RYB/5uVSKe2yfnLpyTijMVRs6dPSe1lzqTSoQWLxFpX6+nRAAAJSIrSoRI3Rf6gbusUd6u9UhzwFr0ONgdH7fhurmGoeHazfh7SKzUC8JOe9WUZzSM0jExKvYqR3yNxQa9EGywrgL52y3m2Qrvraakn6fRKB8yopcVm/W4eQ6jqMzmfSuyrkS4ku4b/dKYzmiK9YCBWv0+vQgEkraMRDKXhpSvNUoEAFAisqdEpBhPvpIikQ/cobTvE5vuSJ8WuSJ1t9MvRWi/kigV5YOx+5O2s7vFOz55q/QzJVlVIjJenVGRdF9Eat+KXRJaalz22X+9NL6oMpZzxpSFuSYiuURUUCIAAFlXIuaavBrZYL8iv7E55DeHZ34zqmUFDn28wxi/Mi/9/pX6Y6n7l011u83cbrbvnqlKxCeNncYVGZNz8OKXD6REzFVkWBNtNLlyRERTt2kRiUzwPwYAYCGXiCyOesOp6agzE7ztNQCAEkGJSMs/vnFKflfSILkV19Py+9ON8s9/KqVEAAAoEZQI/ilwAAAlghJBiQAAgBJBiQAAgBJBKBEAAEoEoUQAACgRlAhKBACAEkGJoEQAAJB1JWJLaQMFYB6iXkcAABZViQAAAJQIAAAASgQAAKBEAAAASgQAAKBEAAAASgQAAAAlAgAAUCIAAAAlAgAAUCIAAAAlAgAAgBIBAAAoEQAAgBIBAAAoEQAAgBIBAACQ5SViYOSuHKibkP88GpXH86KyJEPUfWqMGqu2AQAAi7xEqFLwxL6oLHsvKk/nR2V5hqj71Bg1Vm3zKInepfTg0cd+DCDrSoQ6u6DKwfJpCsRT744Z+cF7EWOs2ua+hAdly8E2+fSWZn7p9spS/euU5LfL4apu8QXv73sFR6NytVszPmKB0/erP+r7zotlvhn3uUdNbzAizl5NwlGKBIAsKhFqmuLpGQrEkcuj0tI3bnyuxqpt7u+X/YCsSS4RbR6jOJRc8onzupnqCne8UFS77+0XvyoOl72aODwh4yNFYqGXiAF50dpnSiaXhVDqPveoFQi1D6tQJABkVYlQ6x0yFQh15uFXn4SMcSevDhklQt2+5IGUiHZxhSeNC/nlcIE6KHSIJ3zvBeJaL0VisZSILfGzWW7xRDPvc49agbhkFYhYkYhQJABkc4lQBeJHB+9Ia19Y/CMRefLPbuO2B1oiQlOM7e8xDgq7HYHZF4ixRIFw3x4T9etWfTSKxFeacT8W7pmI4xe8xsefnvBNUyKi4qzqlDX5iSm0Ncc75WZ/oq36LnXJlhNecTq65KexMR91iafXL+UnOuLbbTnVLam7ribOC53G94uN2V3WLb45FuHkAjEYGpfxibvS1HeHIgEg+0qEKgg/zE+sfVAf99eav3BfOOKW770zEi8YD7VE6L+QSw7rB4Syvlk9tBaeMIpCrEAkSy4SahwWXolQ+1WJOyw+hzkd9mmzlqFEaFL+Ubscru4RZ/OAXhS81lmMxFkvT1W7VQLazam2i4kysbSgU+r17WorOiaV3KjUf2KO+WNFt9y8NSD11Z3WNl0yNMun0j8yHi8QA3qBiEkuEuoMW3SCIgFQIrKgRKjS0OGPSlnzmHw/LyS/ODZi/IIqafDLv73Zl3KW4psoEWsqBmb10Op3amv/aFqBSC4S6n5+9y7cEmHuV/p+U5hUCjJNZ4Q1CYf0GH/6m2e9jlvFwywR7eLsT+zv9SfUot/OpDKgyaeH9JIb2z+93WZ5mfx9hnxT357BWPSuOHu0lAIxuUh8FQjz3xygRGRPiXj/c/MX4f7akNS6RuW2/gts+Z7O+DTGN1UijF/SszwTESsSd2e4Hwu9RJgHbuPMgTGt4TemOOL3hYfk0+OTrggqaEs50BslosAjyYdq47b85NtSS25skfA7F3zivOSTeitOh8f4WbZU++ewH9+9p/sAUCIeeolQReE7b3jE3pD4JbehqEueeHs4bb3EQy0R1l9271wKsLdgbiVC57toTWs4ulMu8fRdMKchPr00KKGgJkPegfg6h5QSkT/XEuGNT4G8WNAua5LyYmG77L4wyH8nAAunRCRf4rnsQFiW7HDLZfeInHbelu/+qXfKN516/GFdnREcvKerM9R6h0yXwanbWQ+xeEqEsfahMHG2IXbpp6vCLAMpoqnb31uJMM9EVPfe/9MJ3IlmPGs2PBY1pjUAUCKy6s2mnto/Kt/6fZt8+3V32jTGcutdK+//zaYyv0/EzeY+uXndJ+WnEqvfy+dwWZ4WmZCrX2nGfPLkIhG25pnV/WocFkOJEGNaI3alRLwgVJv7V0mjX0IhTYbcPnnnUGrRuJcSEftaleLyRvMsRyg4LD798asv+GS2XXgwFDUWVd4aSF+/8/VoVOq9mtzw3eFdLAFKxCJ82+vwYMr8dOIUcHLa5Z2qHvGF5vbQajFoc+wyuKQiESsQ6nZ1P6vaF2aJUPtVSVt66fQ5OlPfhCqavibixY860ktEgTe9RBRMUSKqkhb+hoek/JP29H260DvrEnFHL7kN3eb+mlwkYgVC3d45xMJKgBLBP8A178YnFQl16je5QHAaGPHjvXWmIBR8AAfk0LBxJkJ9j3B47o8/uUgM3aFAAMiyErFQJReJWCgQeNSoInHVKhKxUCAAUCIecpGgQOBRpSUVCQoEAErEQy4S6hcvBQKPepHw8uZSACgRAACAEgEAACgRAACAEgEAACgRAAAAlAgAAECJAAAAC7JEpP87FIQQQghZaKFEEEIIIYQSQQghhJBHvER8HY4QQgghZIGHEkEIIYQQSgQhhBBCKBGEEEIIoUQQQgghhBJBiSCEEEIIJYIQQgghlAhCCCGEUCIIIYQQQokghBBCCCWCEkEIIYQQSgQhhBBCKBGEEEIIoUQQQgghhBLBC0sIIYRQIigRhBBCCMnOEtExFJG/1o7Lzwqj8nheVJZkiLpPjVFj1Tbz8eR7W3vlaGmnFJzxStcddgayMOJpqZHTjs5F/jpo0lBdJrVdAfYJQhZyiVCl4Il9UVn2XlSezo/K8gxR96kxaqza5n6f+OCXHll6sE2W5rfL6gKXOAPsDOQ+E+qU13NyxHbrmz1w3TixSnJW2MQ3zQG2Mlcfo/+sKXluu9hnLB8BqSx8T063DMzfz+xvkw/3HhNH//yWCNvqFZJT1MJ+SchCLhHq7IIqB8unKRBPvTtm5AfvRYyxapv7feItn7XrJcIlLZyBIPNWItpkXRaUiNbSV/VCUCaD0xxgT76iH2B3lYmjxSkOpx5HjRRYxWKvo2fG5/jsPB6cBztOGt/3w3l93cznuO5EG/slIQu5RKhpiqdnKBBHLo9KS9+48bkaq7a57xJxVi8RBR52ArJoS8S60q6020/n6uXilem2Vc9TewCv3fxPZ1AiCFkEJUKtd8hUINSZh199EjIe8+TVIaNEqNuX3GeJaPuiU36spjIOtsvGD9tl1/l+877+Pvm42GVOc6gUuOTjur7U7e8MyfnPOmV1bIz+GLs+65FezmiQ2ZQIf6ecPLg9MYXwyhRTCHcCUlt6zHgsc9wqeX2vXVqtKTePs1I2vpI0HfHKbqls6Zl7iZjiAGtuaxefPsZRtFsO1+n7dle97M3dJDuLnMa2tfrte2vMn3mwp1525h6TWmed7N2c+Jl2nqhPnU4xnvdueTb2M694Vf4SGxPqkQ9zt0tll2Y8vvl926TVcTIx/rlX5XCFM+U5OUrfk3WrE9Mx6/Sfo6Ffo0QQQokwC8SPDt6R1r6w+Eci8uSf3cZt81Eiuhq9suOIWQJ2nemUsit+vUD45NdWKTj6ea84r/XKUVu7MebXZ3zWtkPysbXdtjNeudzsk7IzHWaZONIlvexQlIjpSoS/RTZaB1BbjVNutDjFtvdV4wC48URLfM3Byc0rzANxUY04WlrE4ag01lrYO8wDZGtFnrxeWCkOZ4s06Afv2DTE6S7t/s5E9DuN75Nz0CwLsZ9D5dlc/cBeqg7i+u2rV8iz1sF5sKMsPub1whppuNUilXoJML4+Z5Ujv9N83noZ+vBcvTGmutpmvA4OVYyCya9b8vddJYfVeP11Onlwk3nb3jrreWlyetcmvVjU6a9RmzjqzNcoZ8VuaQ1RIghZdCVCFYQf5ifWPqiP+2s14/FeOOKW770zEi8YSx7AdMZFu1kgLvpTx10+YxaJi/0R6b3SaXx+9FrqQaL3mnn7u42sBKdEZC4RjqNqweMm88CZdHvDiU3GAdOh73u9V4+Z6wOcMy1c1GQwqMc4YPbIX9Rf4tY6hVmVCHWg1v+637h5k5F18TMbq+JnBE6rMfqBvrZHy3gWI1Yi1BmLlGmRzYlpkfjz9s/mdYt93/TxrdV5Zlnq0FKmVozXQX3eU2e+di0BSgQhi61EqNLQ4Y9KWfOYfD8vJL84NiLRibtS0uCXf3uzL+UsxbyUCLWwMr/L+kU7LB8fapMfl/rSxwZ8xtRFQXNQnGfMbdLPOATlqNr+jI+dihKRoURYf8FPtSAx2GJspxYW3jgRm07IXAAcJ3ZPurJilXHaf6N1wJxNiTAP1NvFVlomthN2sRXZ5XSNU1zB1LKQ/vNOUSL0A35rKNO6jGmed4YSMfX3TYw7fHXAmAKxTb7CxCpCyY9DiSBkEZWI9z8fMLbfXxuSWteo3A6Ny/I9nfFpjAdaIgraZPVnfeljR/qMaQ5VIoxtCrqm+OWs/8I6TImgRMxQIqZczGheGrrRKhGtqkRMt7DRW2NOFZyoF5c/IL7+HqmtODbnEpHxZ5lx3cRUJeJVuRGcpkTM9L2mKBHrTkwxPug0nufOmh5xVZtFyuboFF8gIB5vm5y21ppQIghZpNMZ33nDI/YGf/xxNhR1yRNvD6etl5j/EqFJ2Ydtxtddk9+QyprCKHNr0nbeZU55TL6evb/XWKi57XM/OxUlQmwd2tTvzfCGmkKwiWfyPmZNYVR6NfPgqNYKZDj1P3jrpHF/653090RYN9cSMe0Bdv5KRKbnnbFEGFMtx8SVdilopVUSNOuMTdmkBalTlRFKBCGL5hLPZQfCsmSHWy67R+S087Z890+9U77p1OPzXiLUuoYuc4Hk8S5p6QnK4EhQWr7oTF006Y8tvnTJ+dYhfcywdLX2yDZrQeZlPzvUYi8R6ozCzgq1GLDFfP+FWFp6pLfFWoS4yy6t/QEZDAWMKxCM2zaXmVMYgdjiy+1SfavHmO/3+XukttQm1XrJGOwyD6Q7S53iCej39XdK5UFrcWbpwysRz86qRJjTMr0t1nPMtcuNnoDxnDw9bWIvtJvTINbrlrImwnhNbNLgVeP118lZaV6tskIvF3fU4lLzrIP9aqf49Ps9XU7Za12pYadEELJ432zqqf2j8q3ft8m3X3enTWMst961cl7ebOps+tRE25WupEs3zay2dUnbSNJfQ55e2VGQOmZpQYdc9GjsUJQI8wqBqWIdUF1Xy5Iu3bQuTdxbJq6kNQWDPU75yysr0tY9qBJhronYnnrf5u3GYyZKxKYZ3utBP1AbUwzTl4jT05SI2JUXsTUR6SVC/xk218R/hqmed85z75nP2yoRldbzM98Iyy62vZPWPGw+Jjdii1LvqDURqa/Rxl3bU0rEaUoEIQu/RHxTb3udOaPS2z8kXT1D0hsYzfwue35rjH+YHYnMOT6//tdzf0D/KzrzmEE1198/YIxNXx9g3ufxBx7N5x3QZrVeY9B6npnGq9fIF5ju8QghC7pEfJP/ABchJNvCNAQhlAheWELIPZYIm5qe4B/OIoQSQQghc81gf4+4/ExPEEKJIIQQQgglghJBCCGEEEoEIYQQQigRhBBCCKFEEEIIIYQSwQtLCCGEUCIoEYQQQgihRBBCCCGEEkEIIYQQSgQhhBBCKBGUCEIIIYQSQYkghBBCCCWCEEIIIZQIQgghhFAiCCGEEEKJoEQQQgghlAgAAIAZUSIAAAAlAgAAUCIAAAAlAgAAUCIAAAAoEQAAgBIBAAAoEQAAgBIBAAAoEQAAAJQIAABAiQAAAJQIAABAiQAAAJQIAAAASgQAAKBEAAAASgQAAKBEAAAASgQAAAAlAgAAUCIAAAAlAgAAUCIAAAAlAgAAgBIBAAAoEQAAgBIBAAAoEQAAgBIBAABAiQAAAJQIAABAiQAAAJQIAABAiaBEAAAASgQAAKBEAAAASgQAAKBEAAAAUCIAAAAlAgAAUCIAAAAlAgAAUCIAAAAoEQAAgBIBAAAoEQAAgBIBAAAoEQAAAJQIAABAiQAAAFlQIu5anxBCCCGEzDZ3/x+LK7AwiC/i9wAAAABJRU5ErkJggg==" width="529" height="243" class="img_ev3q"></p></li><li><p>外部主体和本地主体共享相同的访问权限。</p></li></ol><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>重新配置以前设置的身份验证提供程序</div><div class="admonitionContent_S0QG"><p>如果你需要重新配置或禁用以前设置的提供程序然后再重新启用它,请确保进行此操作的用户使用外部用户身份登录 Rancher,而不是本地管理员。</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="禁用认证提供程序">禁用认证提供程序<a href="#禁用认证提供程序" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>禁用身份认证提供程序时,Rancher 会删除与其关联的所有资源,例如:</p><ul><li>Secrets</li><li>全局角色绑定。</li><li>集群角色模板绑定。</li><li>项目角色模板绑定。</li><li>与提供商关联的外部用户,但是这些用户从未以本地用户身份登录到 Rancher。</li></ul><p>由于此操作可能会导致许多资源丢失,因此你可能希望在提供程序上添加保护措施。为确保在禁用身份认证提供程序时不会运行此清理,请向相应的身份认证配置添加特殊注释。</p><p>例如,要为 Azure AD 提供程序添加安全措施,请注释 <code>azuread</code> authconfig 对象:</p><p><code>kubectl annotate --overwrite authconfig azuread management.cattle.io/auth-provider-cleanup=&#x27;user-locked&#x27;</code></p><p>在你将注释设置为 <code>unlocked</code> 之前,Rancher 不会执行清理。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="手动运行资源清理">手动运行资源清理<a href="#手动运行资源清理" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>即使在你配置了另一个身份认证提供程序,Rancher 也可能会保留 local 集群中已禁用的身份认证提供程序配置的资源。例如,如果你使用 Provider A,然后禁用了它并开始使用 Provider B,当你升级到新版本的 Rancher 时,你可以手动触发对 Provider A 配置的资源的清理。</p><p>要为已禁用的身份认证提供程序手动触发清理,请将带有 <code>unlocked</code> 值的 <code>management.cattle.io/auth-provider-cleanup</code> 注释添加到 auth 配置中。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/rancher/rancher-docs/edit/main/docs/pages-for-subheaders/authentication-config.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-05-12T09:45:17.000Z">2023年5月12日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/pages-for-subheaders/authentication-permissions-and-global-configuration"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">身份验证、权限和全局配置</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/manage-users-and-groups"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">用户和组</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#外部验证与本地验证" class="table-of-contents__link toc-highlight">外部验证与本地验证</a></li><li><a href="#用户和组" class="table-of-contents__link toc-highlight">用户和组</a></li><li><a href="#rancher-授权范围" class="table-of-contents__link toc-highlight">Rancher 授权范围</a></li><li><a href="#外部身份验证配置和用户主体" class="table-of-contents__link toc-highlight">外部身份验证配置和用户主体</a></li><li><a href="#禁用认证提供程序" class="table-of-contents__link toc-highlight">禁用认证提供程序</a><ul><li><a href="#手动运行资源清理" class="table-of-contents__link toc-highlight">手动运行资源清理</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 SUSE Rancher. All Rights Reserved.</div></div></div></footer></div>
<script src="/zh/assets/js/runtime~main.9a7dea44.js"></script>
<script src="/zh/assets/js/main.50802f1f.js"></script>
</body>
</html>