How to configure AD authentication for ARO cluster

Question

Hi , I need help on configuring Authentication for ARO cluster. By default, it has kubeadmin authentication. I want to configure AD authentication for newly created ARO cluster. Can anyone suggest on the procedure please. Regards, Balaraju M

Answer 1

@adz2MangiYes, it is possible to configure AD authentication for Azure Red Hat OpenShift cluster. You can follow the steps outlined in this Red Hat Cloud Experts Documentation guide. The guide walks you through the following steps:

1. Register a new application in Azure AD for authentication.
2. Configure the application registration in Azure AD to include optional claims in tokens.
3. Configure the Azure Red Hat OpenShift (ARO) cluster to use Azure AD as the identity provider.
4. Grant additional permissions to individual users.

You can also refer to this Microsoft Learn Portal article for a detailed step-by-step guide on how to configure Microsoft Entra authentication for an Azure Red Hat OpenShift 4 cluster using the Azure portal and the OpenShift web console. The article covers the following topics:

1. Create a Microsoft Entra application for authentication.
2. Configure optional claims.
3. Assign users and groups to the cluster (optional).

I hope this helps! Let me know if you still have questions.

---

If you still have questions, please let us know in the "comments" and we would be happy to help you. Comment is the fastest way of notifying the experts. If the answer has been helpful, we appreciate hearing from you and would love to help others who may have the same question. Accepting answers helps increase visibility of this question for other members of the Microsoft Q&A community. Thank you for helping to improve Microsoft Q&A!