Authentication and Authorization in AKS Cluster? Best Solution Confusion?

Question

I would like to secure my AKS Cluster completely and in the option Authentication and Authorization we have three options now:

1) Local Accounts with Kubernetes RBAC.
2) Azure AD Authentication with Kubernetes RBAC.
3) Azure AD Authentication with Azure RBAC.

I have tried 2nd option but now my concrete question is which is best suitable solution in the sense of cheap price, effective and latest with no errors or disturbance in future and long term solution with less limitations.

Answer 1

Hi Jamal,

I will suggest and recommend to look into and explore Azure AD authentication with Azure RBAC as this is best practice and will allow to you to control and manage user access from the central pane of AAD.

It also depends on the core requirements you have as both the options like AKS RBAC and Azure AD RBAC give you flexibility and control of the resources.

In terms of price and effective I would say Azure AD RBAC will be best if you are looking for long term horizon.

Check this article and the design decisions are critical so plan it accordingly. concepts-identity
2838794

----
Please don't forget to upvote and Accept as answer if the reply is helpful

If this answer helped you please mark it as "Verified" so other users can reference it.