Skip to content

Instantly share code, notes, and snippets.

@simonfelding
simonfelding / azure-ad-federation.yaml
Created November 29, 2024 11:18
Simple and repeatable single sign-on for Kubernetes >= 1.31 using the new AuthenticationConfiguration resource and Azure AD aka Entra ID
######################################################################################
### This sets up OIDC authentication, essentially a federated login with Azure AD. ###
######################################################################################
## Walkthrough ####################
### ----- Setting up authentication in Azure -----
### 1. Register a new App in Azure (https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationsListBlade)
### 1.1. Replace the variables in this config with the following:
###
### - Application (client) ID == $CLIENT_ID