@@ -38,15 +38,18 @@ sudo npm install -g azure-cli
3838The Azure CLI tool gets installed here:
3939
4040``` bash
41- ls -lh /usr/bin/azure
42- lrwxrwxrwx 1 root root 39 Jan 18 22:58 /usr/bin/azure -> ../lib/node_modules/azure-cli/bin/azure
41+ ls -lh /usr/local/ bin/azure
42+ lrwxrwxrwx 1 root root 39 Jan 18 22:58 /usr/local/ bin/azure -> ../lib/node_modules/azure-cli/bin/azure
4343```
4444
45- Confirm it's installed correctly by viewing its online help. Then put it in
46- * Azure Resource Manager* mode and log in:
45+ Confirm the tool is installed correctly by viewing its online help.
4746
4847``` bash
4948azure help
49+ ```
50+
51+ Put Azure in * Azure Resource Manager* mode and log in:
52+ ``` bash
5053azure config mode arm
5154azure login
5255```
@@ -56,8 +59,8 @@ therefore be easier to perform this on a graphical desktop.
5659
5760### Registering azure services
5861
59- Juju requires certain services to be active for your account. This can
60- be done with the Azure CLI tool:
62+ Juju requires certain services to be active for your account. Enter these
63+ commands to register using the Azure CLI tool:
6164
6265```
6366azure provider register Microsoft.Compute
@@ -72,15 +75,19 @@ To enter credentials, values will need to be found for the following parameters:
7275 - application-id
7376 - tenant-id
7477
78+ !!! Note: In the sections below, we will assign each of these a variable name.
79+ When you enter them into the command, replace the variable name we give with
80+ the actual ID that corresponds to the variable.
81+
7582### ` subscription-id `
7683
77- List your account and get the subscription ID, the ** SUB_ID** :
84+ List your account. Note the subscription ID, the ** SUB_ID** .
7885
7986``` bash
8087azure account list
8188```
8289
83- Sample output :
90+ ** SUB_ID ** will appear on a line like this :
8491
8592``` no-highlight
8693info: Executing command account list
@@ -90,24 +97,22 @@ data: Free Trial f717c8c1-8e5e-4d38-be7f-ed1e1c879e18 true Enabled
9097info: account list command OK
9198```
9299
93- The subscription ID can now be stored in a local environment variable, by
94- entering :
100+ In the output of this command, the ** SUB_ID ** is not labeled as such. In our
101+ sample it was next to last line, so :
95102
96103``` bash
97104SUB_ID=f717c8c1-8e5e-4d38-be7f-ed1e1c879e18
98105```
99106
100- ### ` application-password `
107+ ### ` application-password ` and ` application-id `
101108
102- You will create an application in the next step. For now, create a password for
103- it, the ** APP_PASSWORD ** .
109+ Create a password for the application to use, the ** APP_PASSWORD ** . In our
110+ sample,
104111
105112``` bash
106113APP_PASSWORD=some_password
107114```
108115
109- ### ` application-id `
110-
111116Create an Azure Active Directory (AAD) application:
112117
113118``` bash
@@ -121,22 +126,26 @@ azure ad app create \
121126The options ` --name ` , ` --home-page ` , and ` --identifier-uris ` are arbitrary but
122127you should use values that make sense for your environment.
123128
124- Note the application ID, the ** APP_ID** . It will look similar to:
129+ In the output of this command, note the application ID, the ** APP_ID** .
130+ In our sample it was on a line like this:
125131
126132``` bash
127- APP_ID= f6ab7cbd-5029-43ef-85e3-5c4442a00ba8
133+ data: AppId: f6ab7cbd-5029-43ef-85e3-5c4442a00ba8
128134```
129135
130136Use the APP_ID to create an Active Directory (Kerberos) server principal:
131137
138+ !!! Note: Replace our variable here with the actual value you learned above.
139+ Do this throughout the rest of this page when you see variables listed.
140+
132141``` bash
133142azure ad sp create -a $APP_ID
134143```
135144
136- Note its object ID, the ** OBJ_ID** :
145+ Note its object ID, the ** OBJ_ID** . In our sample it was on a line like this :
137146
138147``` bash
139- OBJ_ID= aab17f6f-6b9a-43ae-8d6d-2ff889aa8941
148+ data: ObjectId: aab17f6f-6b9a-43ae-8d6d-2ff889aa8941
140149```
141150
142151Now grant permissions to the principal (OBJ_ID) associated with your
@@ -157,10 +166,10 @@ Get the tenant id, the **TENANT_ID**:
157166azure account show
158167```
159168
160- It will look like:
169+ In our sample it was on a line like this :
161170
162171``` bash
163- TENANT_ID= daff614b-725e-4b9a-bc57-7763017c1cfb
172+ data: Tenant ID: daff614b-725e-4b9a-bc57-7763017c1cfb
164173```
165174
166175You can test by logging in using the application principal as your identity:
@@ -179,12 +188,21 @@ You can now run the interactive command:
179188juju add-credential azure
180189```
181190
182- Which will ask for a credential name, and then the values discovered above.
191+ Which will ask for an arbitrary credential name, which you choose for yourself.
192+ This will be how you remember and refer to this Azure credential in Juju. The
193+ command will also request the values discovered above, which we referred to as:
194+
195+ ``` bash
196+ APP_ID
197+ SUB_ID
198+ TENANT_ID
199+ APP_PASSWORD
200+ ```
183201
184202!!! Note: If you add more than one credential, you will also need to set the
185203default one to use with ` juju set-default-credential `
186204
187- ## Bootstrap
205+ ## Create controller
188206
189207
190208``` bash
0 commit comments