toolshed/docker-cli
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Rename authz to authorization for greater clarity

Browse Source 
Signed-off-by: Tibor Vass <tibor@docker.com>
Upstream-commit: 5c630ea7c3d5e7a24e1c4b2e15506f326706e9bc
Component: engine
This commit is contained in:
Tibor Vass
2016-01-12 19:38:18 -05:00
parent e1237c9947
commit 460be1e8dd
11 changed files with 58 additions and 55 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
components/engine/docs/extend/authorization.md
View File

@ -12,7 +12,7 @@ weight = -1
# Create an authorization plugin
Docker’s out-of-the-box authorization model is all or nothing. Any user with
Docker's out-of-the-box authorization model is all or nothing. Any user with
permission to access the Docker daemon can run any Docker client command. The
same is true for callers using Docker's remote API to contact the daemon. If you
require greater access control, you can create authorization plugins and add
@ -45,6 +45,9 @@ Authorization plugins must follow the rules described in [Docker Plugin API](plu
Each plugin must reside within directories described under the
[Plugin discovery](plugin_api.md#plugin-discovery) section.
**Note**: the abbreviations `AuthZ` and `AuthN` mean authorization and authentication
respectively.
## Basic architecture
You are responsible for registering your plugin as part of the Docker daemon
@ -93,14 +96,14 @@ support the Docker client interactions detailed in this section.
### Setting up Docker daemon
Enable the authorization plugin with a dedicated command line flag in the
`--authz-plugin=PLUGIN_ID` format. The flag supplies a `PLUGIN_ID` value.
This value can be the plugin’s socket or a path to a specification file.
`--authorization-plugin=PLUGIN_ID` format. The flag supplies a `PLUGIN_ID`
value. This value can be the plugin’s socket or a path to a specification file.
```bash
$ docker daemon --authz-plugin=plugin1 --authz-plugin=plugin2,...
$ docker daemon --authorization-plugin=plugin1 --authorization-plugin=plugin2,...
```
Docker's authorization subsystem supports multiple `--authz-plugin` parameters.
Docker's authorization subsystem supports multiple `--authorization-plugin` parameters.
### Calling authorized command (allow)