From cc05706f351fb2b10305db8a52e791248639ec9e Mon Sep 17 00:00:00 2001 From: Carlos Esteban Lopez Date: Mon, 12 Sep 2022 13:00:26 -0500 Subject: [PATCH] docs: Address MR comments Signed-off-by: Carlos Esteban Lopez --- docs/features/kubernetes/authentication.md | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/docs/features/kubernetes/authentication.md b/docs/features/kubernetes/authentication.md index b342a6892c..c4d6fdda96 100644 --- a/docs/features/kubernetes/authentication.md +++ b/docs/features/kubernetes/authentication.md @@ -18,7 +18,9 @@ The providers currently available are divided into server side and client side. ## Server Side Providers These providers authenticate your _application_ with the cluster, meaning anyone that is -logged in into your backstage app will be granted the same access to Kubernetes objects. +logged in into your backstage app will be granted the same access to Kubernetes objects, +to put an example,even guest users would have access to the cluster resources, so be +careful of using server side providers with guest access enabled. The providers available as server side are: @@ -31,9 +33,13 @@ The providers available as server side are: ### Azure The Azure server side authentication provider works by authenticating on the server with -the Azure CLI `az login`, meaning any user that can access the backstage app will have -the same level of access to the cluster in the Kubernetes plugin, to put an example, even -guest users would have access to the cluster resources. +the Azure CLI, follow these steps: + +- Install the Azure CLI: https://docs.microsoft.com/en-us/cli/azure/install-azure-cli?view=azure-cli-latest +- Login with your Azure/Microsoft account with `az login` in the server's terminal +- Go to your AKS cluster's resource page in Azure Console and follow the steps in the + `Connect` tab to set the subscription and get your credentials for `kubectl` integration +- Configure your cluster to use the `azure` auth provider like this: ```yaml kubernetes: