Why does Azure Kubernetes service prompt for credentials so frequently?

Question

Hello support!

We are getting prompted to reauthenticate with Azure Kubernetes service every 15minutes and this is getting extremely annoying / frustrating our developers.

Here is an example when using kubectl:

Note:

• each dev team has their own namespace in AKS, with full admin in that namespace only (i.e. no cluster admin)
• RBAC = enabled
• AKS-managed Azure Active Directory = enabled
• dev-admin-role.yaml
• dev-admin-rolebinding.yaml

Please advise what is causing this issue and how we can resolve it.

Thanks, Sean

Answer 1

Yes, I can confirm that kubelogin has solved this problem for us.

1. Download it from GitHub and place it into the same folder as Kubectl.
2. Open a new terminal window and authenticate with your AKS cluster(s)
3. Type "kubelogin convert-kubeconfig" and hit enter
4. now you can use kubectl commands and your access token will be refreshed automatically (this even works after reboots, etc)

Thanks!

Answer 2

FYI - I have found this issue on Github which seems to describe the problem:

-> https://github.com/Azure/AKS/issues/1669

The workaround is to use the Kubelogin application, so I am trying that now to see if it helps.