Chapter 2. Configuring an Azure Stack Hub account

Procedure

1. Register your environment:

   $ az cloud register -n AzureStackCloud --endpoint-resource-manager <endpoint> 

   1

   Copy to Clipboard Toggle word wrap

   1

   Specify the Azure Resource Manager endpoint, `https://management.<region>.<fqdn>/`.

   See the Microsoft documentation for details.

2. Set the active environment:

   $ az cloud set -n AzureStackCloud

   Copy to Clipboard Toggle word wrap

3. Update your environment configuration to use the specific API version for Azure Stack Hub:

   $ az cloud update --profile 2019-03-01-hybrid

   Copy to Clipboard Toggle word wrap

4. Log in to the Azure CLI:

   $ az login

   Copy to Clipboard Toggle word wrap

   If you are in a multitenant environment, you must also supply the tenant ID.

5. If your Azure account uses subscriptions, ensure that you are using the right subscription:

   1. View the list of available accounts and record the tenantId value for the subscription you want to use for your cluster:

      $ az account list --refresh

      Copy to Clipboard Toggle word wrap

      Example output

      [
        {
          "cloudName": AzureStackCloud",
          "id": "9bab1460-96d5-40b3-a78e-17b15e978a80",
          "isDefault": true,
          "name": "Subscription Name",
          "state": "Enabled",
          "tenantId": "6057c7e9-b3ae-489d-a54e-de3f6bf6a8ee",
          "user": {
            "name": "you@example.com",
            "type": "user"
          }
        }
      ]

      Copy to Clipboard Toggle word wrap

   2. View your active account details and confirm that the tenantId value matches the subscription you want to use:

      $ az account show

      Copy to Clipboard Toggle word wrap

      Example output

      {
        "environmentName": AzureStackCloud",
        "id": "9bab1460-96d5-40b3-a78e-17b15e978a80",
        "isDefault": true,
        "name": "Subscription Name",
        "state": "Enabled",
        "tenantId": "6057c7e9-b3ae-489d-a54e-de3f6bf6a8ee", 

      1

      
        "user": {
          "name": "you@example.com",
          "type": "user"
        }
      }

      Copy to Clipboard Toggle word wrap

      1

      Ensure that the value of the tenantId parameter is the correct subscription ID.

   3. If you are not using the right subscription, change the active subscription:

      $ az account set -s <subscription_id> 

      1

      Copy to Clipboard Toggle word wrap

      1

      Specify the subscription ID.

   4. Verify the subscription ID update:

      $ az account show

      Copy to Clipboard Toggle word wrap

      Example output

      {
        "environmentName": AzureStackCloud",
        "id": "33212d16-bdf6-45cb-b038-f6565b61edda",
        "isDefault": true,
        "name": "Subscription Name",
        "state": "Enabled",
        "tenantId": "8049c7e9-c3de-762d-a54e-dc3f6be6a7ee",
        "user": {
          "name": "you@example.com",
          "type": "user"
        }
      }

      Copy to Clipboard Toggle word wrap

6. Record the tenantId and id parameter values from the output. You need these values during the OpenShift Container Platform installation.

7. Create the service principal for your account:

   $ az ad sp create-for-rbac --role Contributor --name <service_principal> \ 

   1

   
     --scopes /subscriptions/<subscription_id> 

   2

   
     --years <years> 

   3

   Copy to Clipboard Toggle word wrap

   1

   Specify the service principal name.

   2

   Specify the subscription ID.

   3

   Specify the number of years. By default, a service principal expires in one year. By using the --years option you can extend the validity of your service principal.

   Example output

   Creating 'Contributor' role assignment under scope '/subscriptions/<subscription_id>'
   The output includes credentials that you must protect. Be sure that you do not
   include these credentials in your code or check the credentials into your source
   control. For more information, see https://aka.ms/azadsp-cli
   {
     "appId": "ac461d78-bf4b-4387-ad16-7e32e328aec6",
     "displayName": <service_principal>",
     "password": "00000000-0000-0000-0000-000000000000",
     "tenantId": "8049c7e9-c3de-762d-a54e-dc3f6be6a7ee"
   }

   Copy to Clipboard Toggle word wrap

8. Record the values of the appId and password parameters from the previous output. You need these values during OpenShift Container Platform installation.