8. Role-based access control in AKS

Up to this point, you've been using a form of access to Azure Kubernetes Service (AKS) that gave you permissions to create, read, update, and delete all objects in your cluster. This has worked great for testing and development but is not recommended on production clusters. On production clusters, the recommendation is to leverage role-based access control (RBAC) in Kubernetes to only grant a limited set of permissions to users.

In this chapter, you will explore Kubernetes RBAC in more depth. You will be introduced to the concept of RBAC in Kubernetes. You will then configure RBAC in Kubernetes and integrate it with Azure Active Directory (Azure AD).

The following topics will be covered in this chapter:

• RBAC in Kubernetes
• Enabling Azure AD integration in your AKS cluster
• Creating a user and a group in Azure AD
• Configuring RBAC in AKS
• Verifying RBAC for a user

  Note

  To complete the example on RBAC, you need access...