問題文
An administrator wants to understand the order in which the API server evaluates an incoming request to create a Pod. Which sequence correctly describes the stages the request passes through?
選択肢
- The three stages run in parallel and the request is accepted if any one of them succeeds, so a valid token on its own is enough.
- Authentication establishes who the requester is, then authorization decides whether that identity may perform the action, then admission control may mutate or reject the object.
- Admission control runs first, so malformed objects are rejected before the API server verifies the identity of the requester, and authentication and authorization follow.
- Authorization runs before authentication, with the rules referring to the resource rather than to the identity, and the identity is resolved afterwards.