<p>I have two Kubernetes clusters in datacenters and I'm looking to create a third in public cloud. Both of my clusters use Azure AD for authentication by way of OIDC. I start my API server with the following: </p>

<pre><code>--oidc-issuer-url=https://sts.windows.net/TENAND_ID/
--oidc-client-id=spn:CLIENT_ID
--oidc-username-claim=upn
</code></pre>

<p>I created a Kubernetes cluster on GKE, and I'm trying to figure out how to use my OIDC provider there. I know that GKE fully manages the control plane.</p>

<p>Is it possible to customize a GKE cluster to use my own OIDC provider, which is Azure AD in this case?</p>

Daniel Watrous
<p>This is now supported!  Check out <a href="https://cloud.google.com/kubernetes-engine/docs/how-to/oidc" rel="nofollow noreferrer">the documentation</a> on how to configure an external OIDC provider.</p>
