SSO for Kubectl with Azure AD

.kube-config

kubectl config set-cluster {{ cluster_name }} \
   --server=https://{{ Master1 IP address }}:{{ k8s apiserver port }} \
   --certificate-authority={{ /path/to/kube-CA.pem }}

kubectl config set-credentials {{ user@domain }} \
   --auth-provider=azure \
   --auth-provider-arg=environment=AzurePublicCloud \
   --auth-provider-arg=client-id={{ azure_clientapp_ID }}\ 
   --auth-provider-arg=tenant-id={{ azure_tenant_ID }} \ 
   --auth-provider-arg=apiserver-id={{ azure_webapp_ID }}

kubectl config set-context {{ cluster_name }} \
   --cluster={{ cluster_name }} \
   --namespace=default \
   --user={{ user@domain }}

kubectl config use-context {{ cluster_name }}