This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(284.8, 13%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESR%3C/text%3E%3C/svg%3E)
Hi, I am trying to login into the containers inside AKS with the domain user id of the Azure Active Directory. Most of the documentation that I found for Integrating Container and Kubernetes cluster in Azure with Active Directory requires the address of Domain Controller which is not provided in case of Azure Active Directory. Please let me know whether it is possible or not to Log into containers with Azure AD Credentials . I know that containers cannot be added to any domain and so please let me know if there is a valid solution available.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(102.4, 69%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECS%3C/text%3E%3C/svg%3E)
Hi,
To integrate AKS with AAD authentication you can follow the instructions from below:
https://learn.microsoft.com/en-us/azure/aks/managed-aad
You need the have Kubernetes RBAC enabled on your cluster to use this.
Hope this helps!
Hi,
I actually want to run some commands inside the container as a specific domain user of the AAD. I wanted to make sure that the domain users are accessible inside the container and I could run the container from the context of specific user to get the output . The above mentioned method does allow to authenticate with Azure Ad while I log into the Cluster but the domain users are still not visible inside the container.
Hi,
If you run the container under a specific Azure AD identity and access AzureAD resources from the pod you can use "pod managed identity" :
https://learn.microsoft.com/en-us/azure/aks/use-azure-ad-pod-identity
The identity will be some kind of resource inside Kubernetes cluster to which you can assign RBAC roles.
Afterwards you can run a pod under that identity.
Is this what you want?
Hope this helps!
Hi,
I went through the documentation and pretty much understood that the pods managed identity helps you access resources inside the Azure AD using token which are passed on with the pod identity to the AD. The issue that I face involves interacting with another application that uses the credentials of an AD user to log into the system and it accepts windows authentication to login so I need to be logged into the windows container as the Ad user . The pod managed identity does not let the pod recognize domain users credentials I suppose. Also, I believe pod managed identity does not work with windows containers. Correct me if am wrong.
Hi,
I didn't try but I suppose that windows container to be OK for 'pod managed identity'
I don't see anything in the docs that differentiate between linux or windows.