You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
- A [supported version](https://github.com/kubernetes-sigs/cluster-api-provider-azure#compatibility) of `clusterctl`
18
18
19
19
### Setting up your Azure environment
20
20
21
21
1. Login with the Azure CLI.
22
22
23
-
```bash
23
+
```bash
24
24
az login
25
-
```
25
+
```
26
26
27
27
2. List your Azure subscriptions.
28
28
29
-
```bash
29
+
```bash
30
30
az account list -o table
31
-
```
31
+
```
32
32
33
33
3. If more than one account is present, select the account that you want to use.
34
34
35
-
```bash
35
+
```bash
36
36
az account set -s <SubscriptionId>
37
-
```
37
+
```
38
38
39
39
4. Save your Subscription ID in an environment variable.
40
40
@@ -61,7 +61,7 @@
61
61
az aks get-credentials --resource-group <resource-group-name> --name <aks-cluster-name>
62
62
```
63
63
64
-
3. Retrieve the OIDC Issuer URL and OIDC issuer URL.
64
+
3. Retrieve the OIDC Issuer URL.
65
65
```bash
66
66
az aks show \
67
67
--resource-group <resource-group-name> \
@@ -70,7 +70,7 @@
70
70
```
71
71
Hold onto the OIDC issuer URL for creating federated credentials.
72
72
73
-
4. Create a UserAssigned Managed Identity (UAMI) to use for Workload Identity.
73
+
4. Create a User-Assigned Managed Identity (UAMI) to use for Workload Identity.
74
74
```bash
75
75
az identity create \
76
76
--name <uami-name> \
@@ -89,7 +89,7 @@
89
89
90
90
6. Add a Federated Credential to the UAMI
91
91
92
-
To configure the federated credential for the UAMI, follow the detailed instructions in the [Azure Workload Identity: Federated identity credential for an Azure AD application](https://azure.github.io/azure-workload-identity/docs/topics/federated-identity-credential.html#federated-identity-credential-for-a-user-assigned-managed-identity).
92
+
To configure the federated credential for the UAMI, follow the detailed instructions in [Azure Workload Identity: Federated identity credential for an Azure AD application](https://azure.github.io/azure-workload-identity/docs/topics/federated-identity-credential.html#federated-identity-credential-for-a-user-assigned-managed-identity).
93
93
For CAPZ, the federated credential should be configured for the capz-manager service account in the capz-system namespace, like the below:
94
94
```bash
95
95
az identity federated-credential create \
@@ -106,8 +106,8 @@ Run the following command to initialize the management cluster with Cluster API
106
106
107
107
`clusterctl init --infrastructure azure`
108
108
109
-
This command sets up the necessary components, including Cluster API Core, CAPZ, and Azure Service Operator (ASO), which is prebundled.
110
-
View the [Cluster API Quick Start: Initialize the management cluster](https://cluster-api.sigs.k8s.io/user/quick-start.html) for more detailed instructions. Ensure you select the "Azure" tabs for Azure-specific guidance.
109
+
This command sets up the necessary components, including Cluster API Core, CAPZ, and Azure Service Operator (ASO).
110
+
View the [Cluster API Quick Start: Initialize the management cluster](https://cluster-api.sigs.k8s.io/user/quick-start.html)documentation for more detailed instructions. Ensure you select the "Azure" tabs for Azure-specific guidance.
111
111
112
112
7. Annotate the capz-manager service account in the capz-system namespace with the UAMI's clientId:
0 commit comments