https://pig.center/zh/docs/etcd/op-guide/authentication/Recent content in 身份认证指南 on PIG.CENTERHugozh-CNTue, 08 Sep 2026 21:29:01 +0800https://pig.center/zh/docs/etcd/op-guide/authentication/authentication/Mon, 01 Jan 0001 00:00:00 +0000https://pig.center/zh/docs/etcd/op-guide/authentication/authentication/<p><code>auth</code>、<code>user</code>、<code>role</code> 用于身份认证：</p> <div class="td-code td-code--untitled" id="td-code-967948ff-fence-0" data-td-code data-td-code-auto-id data-td-language="shell" data-td-line-count="24"> <div class="td-code__viewport" id="td-code-967948ff-fence-0-viewport" data-td-code-viewport><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-shell" data-lang="shell"><span class="line"><span class="cl"><span class="nb">export</span> <span class="nv">ETCDCTL_API</span><span class="o">=</span><span class="m">3</span> </span></span><span class="line"><span class="cl"><span class="nv">ENDPOINTS</span><span class="o">=</span>localhost:2379 </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> role add root </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> role get root </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> user add root </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> user grant-role root root </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> user get root </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> role add role0 </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> role grant-permission role0 readwrite foo </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> user add user0 </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> user grant-role user0 role0 </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> auth <span class="nb">enable</span> </span></span><span class="line"><span class="cl"><span class="c1"># now all client requests go through auth</span> </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> --user<span class="o">=</span>user0:123 put foo bar </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> get foo </span></span><span class="line"><span class="cl"><span class="c1"># permission denied, user name is empty because the request does not issue an authentication request</span> </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> --user<span class="o">=</span>user0:123 get foo </span></span><span class="line"><span class="cl"><span class="c1"># user0 can read the key foo</span> </span></span><span class="line"><span class="cl">etcdctl --endpoints<span class="o">=</span><span class="si">${</span><span class="nv">ENDPOINTS</span><span class="si">}</span> --user<span class="o">=</span>user0:123 get foo1</span></span></code></pre></div></div> </div> <h3 id="note">注意： </h3> <p>本文仅为示例，需补充并更新关于身份认证的更多信息。上述文本仅为代码示例。</p>https://pig.center/zh/docs/etcd/op-guide/authentication/rbac/Mon, 01 Jan 0001 00:00:00 +0000https://pig.center/zh/docs/etcd/op-guide/authentication/rbac/<h2 id="overview">概述 </h2> <p>身份认证功能自 etcd 2.1 版本起引入。etcd v3 API 对身份认证功能的 API 和用户界面进行了轻微调整，以更好地适配新的数据模型。本文旨在帮助用户在 etcd v3 中设置基本的身份认证和基于角色的访问控制。</p>