Default for --authorization-mode if --authorization-config not provided.

Default for --authorization-mode if --authorization-config not provided.

• A. AlwaysAllow
• B. RBAC
• C. Node
• D. Webhook

Answer: (A)

Authorization decisions in the API server come from the chosen authorization modes. Some modes depend on external data sources or policy files (for example, Webhook needs a webhook config, ABAC uses a policy file). If you don’t provide that kind of configuration, those modes can’t operate. The API server then uses the mode that doesn’t require extra configuration by default, which is AlwaysAllow—meaning every request is permitted. So, without an authorization-config, the default behavior is to allow all requests. If you want strict control, you’d explicitly enable a mode like RBAC and provide the appropriate policies.

Authorization decisions in the API server come from the chosen authorization modes. Some modes depend on external data sources or policy files (for example, Webhook needs a webhook config, ABAC uses a policy file). If you don’t provide that kind of configuration, those modes can’t operate. The API server then uses the mode that doesn’t require extra configuration by default, which is AlwaysAllow—meaning every request is permitted. So, without an authorization-config, the default behavior is to allow all requests. If you want strict control, you’d explicitly enable a mode like RBAC and provide the appropriate policies.