ã¿ã¯ãœãããŒ
質åã«çããåã«ããããäœã«ã€ããŠã®ãã®ããç¥ãã
æ©èœ
ãã¬ããžã¿ã°ã¯ããšãŒãžã§ã³ããåºã¥ããŠããææãšãã®ã³ãã¯ã¿ããå°åºããããããã®ã¿ã°ã¯ããªã·ãŒå¯Ÿå¿ã§ããã¿ã°ã¯è¡šç€ºãããŠããå ŽåããããŸãããåºã«ãªããœãŒã¹ã¯è¡šç€ºãããŠããªãå ŽåããããŸããæ®µéçãªåé¡åšã¯ãå信質åããšãŒãžã§ã³ãã®ç¯å²å ãã©ãããå€å®ããå¿ èŠãªå Žåã«ã®ã¿å®äŸ¡ãªãã¿ãŒã³ãããã³ã°ããåãèŸŒã¿æ¯èŒã«ãšã¹ã«ã¬ãŒãããŸãã
éèŠæ§
ã»ãšãã©ã®æªããšãŒãžã§ã³ãåçã¯æšè«ã®å€±æã§ã¯ãªãã¹ã³ãŒãã®å€±æã§ãã質åã¯ããã®ãšãŒãžã§ã³ãã詊ãã¹ãããšã§ã¯ãããŸããã§ãããã¹ã³ãŒããæåã«åé¡ããããšã§ãèªä¿¡ãæã£ãçºæã§ã¯ãªããããããªãªãã€ã¬ã¯ãã«å€ãããŸãã
ä»çµã¿
ã¿ã°ãã¢ã¯ã»ã¹ããªã·ãŒãå°éãã
å¶éããããããªã¢ã«ããæŽŸçããã¿ã°ã¯ããã®ãããªã¢ã«ã®ååšãèŠãããšãã§ããªã人ã«ãªãŒã¯ããŸããã
åé¡ã¯ã³ã¹ãã®ããã«å±€ç¶åãããŠãã
å®äŸ¡ãªãã¿ãŒã³ãããã³ã°ãæåã«å®è¡ãããŸããåãèŸŒã¿æ¯èŒã¯ãå®äŸ¡ãªå±€ã確信ããŠããªãå Žåã«ã®ã¿å®è¡ãããŸãã
ããã¯ãªã³ãããžãŒã§ã¯ãªããããåŒã³ãŸãã
äœæãããéå±€ã¯ãªããç¶æ¿ããªããã¡ã³ããã³ã¹ããã¹ããŒãããããŸãããèªåã§ç®¡çããæ£åŒãªå顿³ãå¿ èŠãªå Žåãããã¯ãŸã ããã§ã¯ãããŸããã
質å
- ç¬èªã®å顿³ãå®çŸ©ã§ããŸããïŒ
- ãããã§ã¯ãããŸãããã¿ã°ã¯ã¹ããŒã ãšããŠã§ã¯ãªããããªãã®çŽ æããå°åºãããŸããäœæå¯èœãªéå±€ã¯æ¬¡ã®æãããªã¹ãããã§ãããæ§ç¯ãããŠããŸããã
- ã¹ã³ãŒãå€ã®è³ªåã¯ã©ããªããŸããïŒ
- åé¡åšã¯ã¢ãã«ãçãã«ã³ãããããåã«ããã«ãã©ã°ãç«ãŠãããããšãŒãžã§ã³ãã¯å³èããã®ã§ã¯ãªããªãã€ã¬ã¯ãã§ããŸãã
The rest of the bag
AccessControl
ããã¥ã¡ã³ãåäœã®ã¢ã¯ã»ã¹èš±å¯ã§ãããŒãžã ãã§ãªãåçããã£ã«ã¿ãªã³ã°ããŸãã
ããªã·ãŒè§£æ±ºã¯ã¹ããŒãã®ããã«ã»ãã·ã§ã³ããšã«ãã£ãã·ã¥ãããŸããæš©é倿Žã¯ãã£ãã·ã¥ç¡å¹åæã«äŒæããé£è¡äžã®ãã¹ãŠã®ãªã¯ãšã¹ãã§å³åº§ã«äŒæããããšã¯ãããŸããã
Docs
ãšãŒãžã§ã³ããèªã ãã©ã«ãããªãŒãããã³ ãããåŸãæ§æãã¡ã€ã«ã
æœåºã¯ãPDFãã¹ãã¬ããã·ãŒãããã©ã³ã¹ã¯ãªãããã«ããŒããŠããŸãããšããŸããã¯ãªãã€ããªåœ¢åŒã¯è§£æãããŸããã
Events
ãšãŒãžã§ã³ããäœãããããšãã®çç±ã®æ°žç¶çãªèšé²ã
ã€ã³ããã»ã¹ã€ãã³ããã¹ã¯ã·ã³ã°ã«ããŒããšããã¿ãŒã§ããã忣ãããŒã«ãŒã§ã¯ãããŸãããèä¹ çãªã¯ãã¹ãšãŒãžã§ã³ãèšé²ã¯ãå¥ã®Postgresã¿ã¹ã¯å°åž³ã§ãã
That was step 2 of 6: it crosses a tenant boundary. Next, for agent-to-agent traffic the edge is authorised before anything executes, and the caller token is minted for that hop alone.