<commit_before># Authorization Plugins


In Kubernetes, authorization happens as a separate step from authentication.
See the [authentication documentation](../authn_plugins/README.md) for an 
overview of authentication.

Authorization applies to all HTTP accesses on the main apiserver port. (The
readonly port is not currently subject to authorization, but is planned to be
removed soon.)

The authorization check for any request compares attributes of the context of
the request, (such as user, resource kind, and namespace) with access
policies.  An API call must be allowed by some policy in order to proceed.<commit_msg>Fix link to authentication document<commit_after># Authorization Plugins


In Kubernetes, authorization happens as a separate step from authentication.
See the [authentication documentation](authentication.md) for an 
overview of authentication.

Authorization applies to all HTTP accesses on the main apiserver port. (The
readonly port is not currently subject to authorization, but is planned to be
removed soon.)

The authorization check for any request compares attributes of the context of
the request, (such as user, resource kind, and namespace) with access
policies.  An API call must be allowed by some policy in order to proceed.
{'fraction_non_alphanumeric': 0.04110671936758893, 'fraction_numerical': 0.0, 'mean_word_length': 5.175609756097561, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '2932456', 'n_tokens_mistral': 298, 'n_tokens_neox': 287, 'n_words': 175}