Skip to content

Add AKS Kubernetes RBAC with Microsoft Entra groups quickstart - #496

Open
Rebecca Calixte (Rebecca-Calixte) wants to merge 1 commit into
masterfrom
copilot/add-aks-entra-k8s-rbac-existing-groups
Open

Add AKS Kubernetes RBAC with Microsoft Entra groups quickstart#496
Rebecca Calixte (Rebecca-Calixte) wants to merge 1 commit into
masterfrom
copilot/add-aks-entra-k8s-rbac-existing-groups

Conversation

@Rebecca-Calixte

Copy link
Copy Markdown
Collaborator

Summary

Adds a Terraform quickstart for using Microsoft Entra ID groups with Kubernetes role-based access control (Kubernetes RBAC) in Azure Kubernetes Service (AKS).

The sample demonstrates how to scope existing Microsoft Entra groups to separate Kubernetes namespaces by using AKS Cluster User role assignments, Kubernetes Roles, and RoleBindings.

Includes

  • Existing AKS cluster lookup
  • Microsoft Entra group object ID inputs
  • AKS Cluster User role assignments
  • Separate dev and sre Kubernetes namespaces
  • Namespace-scoped Kubernetes Roles and RoleBindings
  • Validation steps for confirming allowed and denied namespace access
  • Cleanup guidnce

Validation

  • terraform fmt completed successfully
  • terraform init -backend=false completed successfully
  • terraform validate completed successfully

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant