You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/aks/managed-aad.md
+12-8Lines changed: 12 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,19 +4,19 @@ description: Learn how to use Azure AD in Azure Kubernetes Service (AKS)
4
4
services: container-service
5
5
manager: gwallace
6
6
ms.topic: article
7
-
ms.date: 03/24/2020
7
+
ms.date: 05/11/2020
8
8
---
9
9
10
10
# Integrate Azure AD in Azure Kubernetes Service (Preview)
11
11
12
12
> [!Note]
13
-
> Existing AKS v1 clusters with AD integration are not affected by the new AKS v2 experience.
13
+
> Existing AKS clusters with AAD (Azure Active Directory) integration are not affected by the new AKS-managed AAD experience.
14
14
15
-
Azure AD integration with AKS v2 is designed to simplify the Azure AD integration with AKS v1 experience, where users were required to create a client app, a server app, and required the Azure AD tenant to grant Directory Read permissions. In the new version, the AKS resource provider manages the client and server apps for you.
15
+
Azure AD integration with AKS-managed AAD is designed to simplify the Azure AD integration experience, where users were previously required to create a client app, a server app, and required the Azure AD tenant to grant Directory Read permissions. In the new version, the AKS resource provider manages the client and server apps for you.
16
16
17
17
## Limitations
18
18
19
-
* You can't currently upgrade an existing Azure AD enabled AKS v1 cluster to the v2 experience.
19
+
* You can't currently upgrade an existing AKS AAD-Integrated cluster to the new AKS-managed AAD experience.
20
20
21
21
> [!IMPORTANT]
22
22
> AKS preview features are available on a self-service, opt-in basis. Previews are provided "as-is" and "as available," and are excluded from the Service Level Agreements and limited warranty. AKS previews are partially covered by customer support on a best-effort basis. As such, these features are not meant for production use. For more information, see the following support articles:
@@ -26,11 +26,14 @@ Azure AD integration with AKS v2 is designed to simplify the Azure AD integratio
26
26
27
27
## Before you begin
28
28
29
+
> [!Important]
30
+
> You must use Kubectl with a minimum version of 1.18
31
+
29
32
You must have the following resources installed:
30
33
31
-
- The Azure CLI, version 2.2.0 or later
34
+
- The Azure CLI, version 2.5.1 or later
32
35
- The aks-preview 0.4.38 extension
33
-
- Kubectl with a minimum version of [1.18 beta](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.18.md#client-binaries)
36
+
- Kubectl with a minimum version of [1.18](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.18.md#v1180)
34
37
35
38
To install/update the aks-preview extension or later, use the following Azure CLI commands:
36
39
@@ -101,7 +104,7 @@ Alternatively, if you first create a group and add members, you can enable the A
101
104
az aks create -g MyResourceGroup -n MyManagedCluster --enable-aad [--aad-admin-group-object-ids <id>] [--aad-tenant-id <id>]
102
105
```
103
106
104
-
A successful creation of an Azure AD v2 cluster has the following section in the response body
107
+
A successful creation of an AKS-managed AAD cluster has the following section in the response body
105
108
```
106
109
"Azure ADProfile": {
107
110
"adminGroupObjectIds": null,
@@ -145,7 +148,8 @@ The user above gets an error because the user is not a part of a group that has
145
148
146
149
## Next steps
147
150
148
-
Learn about [Azure AD Role Based Access Control][azure-ad-rbac].
151
+
* Learn about [Azure AD Role-Based Access Control][azure-ad-rbac].
152
+
* Use [kubelogin](https://github.com/Azure/kubelogin) to access features for Azure authentication that are not available in kubectl.
0 commit comments