#azure - July 2020

Hi guys - I wish to make a AKS cluster using terraform, but provide the service principle credentials via a aws key vault. However I am also making they key vault at the same time.. so I have a bit of a chicken and egg situation

any advice on how to resolve?

Hi guys, an AKS credentials question:
I'm reading through https://github.com/Azure/AKS/issues/397, but cannot make heads nor tails of how this is supposed to work

I have an AKS cluster, and it seems I can get credentials with and without --admin

but I do not understand what is allowing that, now how to disallow that for others

the final comment on the github issue says

--admin is controlled by Azure RBAC role (azure-kubernetes-service-cluster-admin-role). It basically ignores AAD and uses client certificates.

but --admin fetches the kubeconfig for this role...?

further: The user role seems to have full access to the cluster too