[[["容易理解","easyToUnderstand","thumb-up"],["確實解決了我的問題","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["難以理解","hardToUnderstand","thumb-down"],["資訊或程式碼範例有誤","incorrectInformationOrSampleCode","thumb-down"],["缺少我需要的資訊/範例","missingTheInformationSamplesINeed","thumb-down"],["翻譯問題","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["上次更新時間：2025-07-22 (世界標準時間)。"],[],[],null,["# Security overview\n\nWhen an application sends a request to an attached cluster through\nConnect, it must pass through three security checkpoints.\n\n1. The request first goes to the Google Cloud API\n *connectgateway.googleapis.com* API, which verifies that the caller is\n authorized to use that API.\n\n2. If authorized, the request is then passed to the connect gateway\n for Google Cloud IAM authorization.\n\n3. If this succeeds, the request is passed to the connect gateway\n to the cluster's kube-api server for RBAC authorization.\n\nIf all of these checks are successful, then the cluster's kube-apiserver will\nserve the request.\n\nSee\n[Grant IAM roles to users](/anthos/multicluster-management/gateway/setup#grant_iam_roles_to_users)\nfor instructions on granting IAM roles to cluster users with the Connect\nGateway."]]
