I need to grant a process (build pipeline) RBAC access to AKS API for deployment purposes. But the target AKS cluster has AAD integration active (as described here)
I was expecting to be able to access the AKS API's with a simple Service Principal, but I'm redirected to a devicelogin page:
$ az login --service-principal --username [REDACTED]-XXXX-XXXX-XXXX-XXXXXXXXXXXX --password [REDACTED]XXxxXXxxXXxxxXXXxxXXxxXXxx= --tenant [REDACTED]-XXXX-XXXX-XXXX-XXXXXXXXXXXX $ az aks get-credentials -n oli-aksdemo01 -g oli-aksdemo01 Merged "oli-aksdemo01" as current context in /home/olivier/.kube/config $ kubectl get nodes To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code C2NP77EGR to authenticate.
Is there a way to avoid the devicelogin page when authenticating a Service Principal on an AAD-integrated AKS cluster on Azure ?