We won’t spend too much time on the presentation of AKS, the service that has been very popular in recent months.
In brief, AKS is Microsoft\u2019s new managed container orchestration service. It is gradually replacing Azure Container service and focuses only on the Cloud Native Computing foundation (CNCF) Kubernetes orchestration engine.
In the last lab: Create a Kubernetes cluster with Azure AKS using Terraform<\/a>,<\/span> we have discussed the Azure Kubernetes Service (AKS) basics, the Infrastructure as Code (IaC) mechanism with a focus on Hashicorp Terraform and how to deploy a Kubernetes cluster with AKS using Terraform.
With this lab, you\u2019ll go through tasks that will help you master the basic and more advanced topics required to secure Azure AKS Kubernetes cluster at the deployment level based on the following mechanisms and technologies:<\/p>\n\n\n\n
- \u2705Azure AD (AAD)<\/span><\/a><\/li>
- \u2705AKS with Role-Based Access Control (<\/span><\/a>RB<\/a><\/span>AC)<\/span><\/a><\/li>
- \u2705Container Network Interface (<\/span><\/a>CNI<\/a><\/span>)<\/span><\/a><\/li>
- \u2705Azure Network policy<\/a><\/span><\/li>
- \u2705Azure <\/span><\/a>Key Vault<\/a><\/span><\/li><\/ol>\n\n\n\n
\n\n\n\nThis article is part of a series:<\/p>\n\n\n\n
- Secure AKS at the deployment: part 1<\/a><\/li>
- Secure AKS at the deployment: part 2<\/li>
- Secure AKS at the deployment: part 3<\/span><\/a><\/li><\/ul>\n\n\n\n
\n\n\n\nAssumptions and Prerequisites<\/h2>\n\n\n\n
- You have basic knowledge of Azure<\/a><\/li>
- Have basic knowledge of Kubernetes<\/a><\/li>
- You have Terraform <\/span><\/a>installed in your local machine<\/li>
- You have basic experience with Terraform <\/li>
- Azure subscription: Sign up for an Azure account, if you don\u2019t own one already. You will receive USD200 in free credits.<\/li><\/ul>\n\n\n\n
Implement RBAC to secure AKS at the deployment <\/h2>\n\n\n\n
![\"Secure](\"https:\/\/aymen-segni.com\/wp-content\/uploads\/2020\/01\/kubernetes-security-1024x519.png\")
<\/figure><\/div>\n\n\n\nIn this part, we will continue our exploration of the use of Azure Active Directory (AAD) . We will detail the deployment steps with Terraform and Azure provider and Kubernetes in order to implement RBAC authentication mechanism to with Azure AKS Kubernetes.<\/p>\n\n\n\n
\u2139\ufe0f Note<\/strong>
This implementation is based on the last Infra as Code lab: Create a Kubernetes cluster with Azure AKS using Terraform<\/a><\/span><\/p>\n\n\n\n1- Deployment of an AKS cluster integrated with Azure AD<\/h3>\n\n\n\n
Now that the prerequisites are done at the Azure AD level, we can deploy the AKS cluster using a Terraform config. For the AKS resource, we use azurerm_kubernetes_cluster.<\/p>\n\n\n\n
- Have basic knowledge of Kubernetes<\/a><\/li>
- \u2705AKS with Role-Based Access Control (<\/span><\/a>RB<\/a><\/span>AC)<\/span><\/a><\/li>