https://pig.center/ja/docs/etcd/op-guide/authentication/Recent content in 認証ガイド on PIG.CENTERHugoja-JPTue, 08 Sep 2026 21:29:01 +0800https://pig.center/ja/docs/etcd/op-guide/authentication/authentication/Mon, 01 Jan 0001 00:00:00 +0000https://pig.center/ja/docs/etcd/op-guide/authentication/authentication/<p>認証に使用する<code>auth</code>、<code>user</code>、<code>role</code>：</p> <div class="td-code td-code--untitled" id="td-code-d4c0856e-fence-0" data-td-code data-td-code-auto-id data-td-language="shell" data-td-line-count="24"> <div class="td-code__viewport" id="td-code-d4c0856e-fence-0-viewport" data-td-code-viewport><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-shell" data-lang="shell"><span class="line"><span class="cl"><span class="nb">export</span> <span class="nv">ETCDCTL_API</span><span class="o">=</span><span class="m">3</span> </span></span><span class="line"><span class="cl"><span class="nv">ENDPOINTS</span><span class="o">=</span>localhost:2379 </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> role add root </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> role get root </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> user add root </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> user grant-role root root </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> user get root </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> role add role0 </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> role grant-permission role0 readwrite foo </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> user add user0 </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> user grant-role user0 role0 </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> auth <span class="nb">enable</span> </span></span><span class="line"><span class="cl"><span class="c1"># now all client requests go through auth</span> </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> --user<span class="o">=</span>user0:123 put foo bar </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> get foo </span></span><span class="line"><span class="cl"><span class="c1"># permission denied, user name is empty because the request does not issue an authentication request</span> </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> --user<span class="o">=</span>user0:123 get foo </span></span><span class="line"><span class="cl"><span class="c1"># user0 can read the key foo</span> </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> --user<span class="o">=</span>user0:123 get foo1</span></span></code></pre></div></div> </div> <h3 id="note">注意： </h3> <p>これは、認証に関する情報を追加して更新する必要がある未完成のページです。上記のテキストはコード例にすぎません。</p>