CODEWITHSUNDEEP
azureazure-active-directoryazure-aksazure-rbac
Satyam Pandey
Satyam Pandey

Reputation: 743

Enable rbac and aad on existing aks

I have created Azure Kubernetes Cluster, However RBAC and AKS-managed Azure Active Directory are disabled, i want to enable both, but unable to do so

Environment : Azure AKS Cluster v1.19.11

enter image description here

I have tried command to enable rbac & aad

$  az aks update -g  k8s-azwe-rg-01 -n k8s-azwe-aks-01 --enable-azure-rbac
Cannot specify "--enable-azure-rbac" if managed AAD is not enabled

$ az aks update -g k8s-azwe-rg-01 -n k8s-azwe-aks-01 --enable-aad --aad-admin-group-object-ids 4b-58-0c-7a --aad-tenant-id e-ece23-19d66-9d4
(RBACNotEnabledForAAD) RBAC must be enabled for AAD to be enabled.


$  az aks update -g  k8s-azwe-rg-01 -n k8s-azwe-aks-01 --enable-aad --enable-azure-rbac
(RBACNotEnabledForAAD) RBAC must be enabled for AAD to be enabled.
Code: RBACNotEnabledForAAD
Message: RBAC must be enabled for AAD to be enabled.

Upvotes: 4

Views: 2751

Answers (2)

Ricky Gummadi
Ricky Gummadi

Reputation: 5222

In case anyone is still looking, it is now possible to enable RBAC to an existing cluster.

https://learn.microsoft.com/en-us/azure/aks/manage-azure-rbac#integrate-azure-rbac-into-an-existing-cluster

Upvotes: -1

zposloncec
zposloncec

Reputation: 426

RBAC can only be enabled during cluster creation, you cannot enable it after the aks cluster is formed.

Upvotes: 3

Related Questions