1. AD, gMSA and SQL Server Windows Authentication in a Container
Michał Poręba
DBA at a SaaS company
Blog:

2. What do we have? Micro services written in .net core Hosted in IIS
And data in SQL Server 2017

3. What do we want? The same micro services Hosted in docker containers
(Because everything now is in containers)

4. Here is the deal SQL Server is fine as it is
No Linux (so no Kubernetes)
We want to keep Windows Authentication

5. Just one problem It doesn’t work!
The containers are not joined to the domain!

6. Just one problem It doesn’t work! There are gMSA
There are credential-spec files

7. And just one problem It doesn’t work! There are gMSA
There are credential-spec files
But everybody tells me!

8. The test setup: Lab on Azure VMs SQLGMSA domain
WebAPI service in a container (michalporeba/sqlgmsatest:1809nano)
Port
SQL Server Instance
DB Name

9. The test setup:
A simple query executed with integrated security

10. See demo download