AKS Engine can be easily integrated with AAD in order to provide Kubernetes API client authentication. Together with AAD groups, this approach can be used for creating RoleBindings and ClusterRoleBindings for user groups that are mapped to AAD groups.
Let's see how you can create an AKS Engine cluster with AAD integration and create an AAD group for cluster admins. This approach can be extended to manage multiple AAD groups that can have different bindings in RBAC.
Adding AAD integration to an existing AKS Engine cluster is not supported. Therefore, you need to make this decision at cluster deployment time.
The steps for configuring AAD applications for a server and client, as well as the creation of the admin ...
