# API Access Control

LLMS index: [llms.txt](/llms.txt)

---

For an introduction to how Kubernetes implements and controls API access,
read [Controlling Access to the Kubernetes API](/docs/concepts/security/controlling-access/).

Reference documentation:

- [Authenticating](/docs/reference/access-authn-authz/authentication/)
   - [Authenticating with Bootstrap Tokens](/docs/reference/access-authn-authz/bootstrap-tokens/)
- [Admission Controllers](/docs/reference/access-authn-authz/admission-controllers/)
   - [Dynamic Admission Control](/docs/reference/access-authn-authz/extensible-admission-controllers/)
   - [Manifest-Based Admission Control](/docs/reference/access-authn-authz/manifest-admission-control/)
- [Authorization](/docs/reference/access-authn-authz/authorization/)
   - [Role Based Access Control](/docs/reference/access-authn-authz/rbac/)
   - [Attribute Based Access Control](/docs/reference/access-authn-authz/abac/)
   - [Node Authorization](/docs/reference/access-authn-authz/node/)
   - [Webhook Authorization](/docs/reference/access-authn-authz/webhook/)
- [Certificate Signing Requests](/docs/reference/access-authn-authz/certificate-signing-requests/)
   - including [CSR approval](/docs/reference/access-authn-authz/certificate-signing-requests/#approval-rejection)
     and [certificate signing](/docs/reference/access-authn-authz/certificate-signing-requests/#signing)
- Service accounts
  - [Developer guide](/docs/tasks/configure-pod-container/configure-service-account/)
  - [Administration](/docs/reference/access-authn-authz/service-accounts-admin/)
- [Kubelet Authentication & Authorization](/docs/reference/access-authn-authz/kubelet-authn-authz/)
  - including kubelet [TLS bootstrapping](/docs/reference/access-authn-authz/kubelet-tls-bootstrapping/)

---

Section pages:

- [Authenticating](/docs/reference/access-authn-authz/authentication/)
- [Authenticating with Bootstrap Tokens](/docs/reference/access-authn-authz/bootstrap-tokens/)
- [Authorization](/docs/reference/access-authn-authz/authorization/): Details of Kubernetes authorization mechanisms and supported authorization modes.
- [Using RBAC Authorization](/docs/reference/access-authn-authz/rbac/)
- [Using Node Authorization](/docs/reference/access-authn-authz/node/)
- [Webhook Mode](/docs/reference/access-authn-authz/webhook/)
- [Using ABAC Authorization](/docs/reference/access-authn-authz/abac/)
- [Admission Control in Kubernetes](/docs/reference/access-authn-authz/admission-controllers/)
- [Dynamic Admission Control](/docs/reference/access-authn-authz/extensible-admission-controllers/)
- [Managing Service Accounts](/docs/reference/access-authn-authz/service-accounts-admin/)
- [User Impersonation](/docs/reference/access-authn-authz/user-impersonation/)
- [Certificates and Certificate Signing Requests](/docs/reference/access-authn-authz/certificate-signing-requests/)
- [Mapping PodSecurityPolicies to Pod Security Standards](/docs/reference/access-authn-authz/psp-to-pod-security-standards/)
- [Kubelet authentication/authorization](/docs/reference/access-authn-authz/kubelet-authn-authz/)
- [TLS bootstrapping](/docs/reference/access-authn-authz/kubelet-tls-bootstrapping/)
- [Manifest-Based Admission Control](/docs/reference/access-authn-authz/manifest-admission-control/)
- [Mutating Admission Policy](/docs/reference/access-authn-authz/mutating-admission-policy/)
- [Validating Admission Policy](/docs/reference/access-authn-authz/validating-admission-policy/)