Closed riragh closed 4 months ago
What/how is this done in AWS, GCP, OSS, or is this a one-off for Azure? Just because we can does not always mean we should. Again, looking for the driving force on just this very specific Azure request.
What/how is this done in AWS, GCP, OSS, or is this a one-off for Azure? Just because we can does not always mean we should. Again, looking for the driving force on just this very specific Azure request.
CIS requested this feature via internal feature request ticket which was scoped and prioritized only for Azure. We have made them aware of the parity we follow across cloud but as there is no immediate requirement for AWS/GCP we don't have any work there yet.
This is useful in other field deployments, and is one modification we need to make on forks from this project. Including it in the project would mean better alignment with best practices, and less deviations from this project a customer would need to maintain manually themselves.
Changes:
This PR adds support for Microsoft Entra authentication with Kubernetes RBAC. For more details on Microsoft Entra authentication with Kubernetes RBAC see Azure documentation here.
With this new feature user will have two options to configure Authentication and Authorization in an AKS cluster:
Tests:
Verified following scenarios:
Microsoft Entra authentication with Kubernetes RBAC
Microsoft Entra authentication with Kubernetes RBAC
Local Accounts with Kubernetes RBAC
Local Accounts with Kubernetes RBAC
Local Accounts with Kubernetes RBAC
Microsoft Entra authentication with Kubernetes RBAC