https://pixelrobots.co.uk/2020/06/use-azure-rbac-to-define-access-to-kubeconfig-in-azure-kubernetes-service-aks/?utm_source=rss&utm_medium=rss&utm_campaign=use-azure-rbac-to-define-access-to-kubeconfig-in-azure-kubernetes-service-aks A blog about Azure Kubernetes Service (AKS) and more... Fri, 18 Jun 2021 09:04:25 +0000 hourly 1 https://wordpress.org/?v=7.1.4 https://pixelrobots.co.uk/2020/06/use-azure-rbac-to-define-access-to-kubeconfig-in-azure-kubernetes-service-aks/#comment-505 Fri, 18 Jun 2021 09:04:25 +0000 https://pixelrobots.co.uk/?p=37378#comment-505 […] Did you know that even when you have enabled Azure AD integration with your AKS cluster, a subscription Owner and Contributor can still access you AKS cluster with the -admin switch? In fact, anyone who is a member of the Azure Kubernetes Service Cluster Admin Role (https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#azure-kubernetes-service-cluster-admin-role) can. You were able to use Kubernetes RBAC (Role Based Access Control) to limit this before, but I have not seen many people do this, or even aware you could. (https://pixelrobots.co.uk/2020/06/use-azure-rbac-to-define-access-to-kubeconfig-in-azure-kubernetes-&#8230😉 […]

]]>