title: External OIDC provider with GKE
body: <p>I have two Kubernetes clusters in datacenters and I'm looking to create a third in public cloud. Both of my clusters use Azure AD for authentication by way of OIDC. I start my API server with the following: </p>
  
  <pre><code>--oidc-issuer-url=https://sts.windows.net/TENAND_ID/
  --oidc-client-id=spn:CLIENT_ID
  --oidc-username-claim=upn
  </code></pre>
  
  <p>I created a Kubernetes cluster on GKE, and I'm trying to figure out how to use my OIDC provider there. I know that GKE fully manages the control plane.</p>
  
  <p>Is it possible to customize a GKE cluster to use my own OIDC provider, which is Azure AD in this case?</p>