TECH MADE SIMPLE

Identity, Authentication and Authorization for Azure Kubernetes Service — AKS

kubernetes/identity/authn/authz

Ala Raddaoui
Microsoft Azure
Published in
14 min readSep 29, 2021

--

Kubernetes does not offer any built in mechanism for defining and managing users. Instead it allows admins to integrate their organization identity service provider of choice in order to interact with the cluster. This way you don’t have to recreate or replicate users and manage them twice. Azure Kubernetes service offer the ability to integrate with Azure AD, an entreprise-grade ready identity management solution as the source of truth for account management and security.

In this blog we will dive deep in the notion of identity, how it is created, the different authentication and authorization options available both from a Kubernetes and Azure Kubernetes service perspective.

TL;DR

Currently, there’s four possible ways to configure Authentication and Authorization in an AKS cluster:

1- Authentication using local accounts for both user and admin access / Authorization using Kubernetes RBAC (default)

--

--

Microsoft Azure
Microsoft Azure

Published in Microsoft Azure

Any language. Any platform. Our team is focused on making the world more amazing for developers and IT operations communities with the best that Microsoft Azure can provide. If you want to contribute in this journey with us, contact us at medium@microsoft.com

Ala Raddaoui
Ala Raddaoui

Written by Ala Raddaoui

Cloud Solution Architect at Microsoft, digital nomad and fan of everything open source, smart and cloud native.

Responses (1)