Feature request - Remote AD Group for AKS Admin Groups

[lukecalderon-dca]

Is there an existing issue for this?

• [X] I have searched the existing issues

Community Note

• Please vote on this issue by adding a :thumbsup: reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

Need support for adding an AD Group in a remote landing zone as an administrator on an AKS Cluster. Currently, only a group in the same landing zone can be used:

https://github.com/aztfmod/terraform-azurerm-caf/blob/6054c167fb977e7aa6267c5eccc171f531a81563/aks_clusters.tf#L20-L25

New or Affected Resource(s

azurerm_kubernetes_cluster

Potential Configuration file

...
admin_groups = {
  lz_key             = "remote_lz"
  azuread_group_keys = ["non_prod_aks_admins"]
}
...

References

No response

[nusrath432]

@arnaudlh Bug fix: https://github.com/aztfmod/terraform-azurerm-caf/pull/1318/commits/5026d51504f88181fc2c3dfdaf29b1c1fa5319c1