Azure Kubernetes Service (AKS) Version · To deploy WISE-PaaS/EdgeSense to your Azure subscription,...
Transcript of Azure Kubernetes Service (AKS) Version · To deploy WISE-PaaS/EdgeSense to your Azure subscription,...
Azure Kubernetes Service (AKS) Version
Quick Start Guide:
How To Retrive My Azure Account Infromation?
English v-1.0.3
1 Find Out More About WISE-PaaS/EdgeSense
Table of Contents
Azure Information For Deployment ...............................................................2
1. How to create and retrieve required information? .................................................................2
Method 1: Create and Get Information on Azure Portal ...............................3
1. Create Service Principal application ......................................................................................3
2. Assign the application to a role and get Azure Subscription ID ...........................................5
3. Get Tenant ID and Application ID ...........................................................................................7
4. Create and get Client Secret ...................................................................................................8
Method 2: Create via Azure CLI (Command-line Tool) ............................... 10
1. Install the Azure CLI ..............................................................................................................10
2. Sign in Account and get Subscription ID .............................................................................10
3. Create a service principal and get Application ID, Tenant ID and Client Secret .................11
2 Find Out More About WISE-PaaS/EdgeSense
Azure Information For Deployment
To deploy WISE-PaaS/EdgeSense to your Azure subscription, a set of Azure account information is
required. You will be prompted to enter required information on the WISE-PaaS/Marketplace, if you chose to
Create Deployment while purchasing EdgeSense perpetual license. WISE-PaaS Marketplace will use your
Azure account information to create depoloyment for WISE-PaaS/EdgeSense on Azure Kubernetes Service
(AKS) version to your Azure subscription. If you already have WISE-PaaS/EdgeSense installed in your Azure
service and do not wish to reinstall EdgeSense, you can Skip Deployment.
1. How to create and retrieve required information?
1.1. Use Azure Portal
OR
1.2. Via Azure CLI (command-line tool)
Below image illustrates an example of information required on the WISE-PaaS Marketplace:
3 Find Out More About WISE-PaaS/EdgeSense
Method 1: Create and Get Information on Azure Portal
1. Create Service Principal application
1.1. Sign in to your Azure Account through the Azure Portal.
1.2. Select Azure Active Directory.
1.3. Select App registrations.
1.4. Select New registration.
1.5. Provide a name for the application. Select a supported account type, which determines who can use the
application. Under Redirect URI, select Web for the type of application you want to create. Enter the URI
where the access token is sent to. You can't create credentials for a Native application. You can't use that
type for an automated application. After setting the values, select Register.
4 Find Out More About WISE-PaaS/EdgeSense
5 Find Out More About WISE-PaaS/EdgeSense
2. Assign the application to a role and get Azure Subscription ID
To access resources in your subscription, you must assign the application to a role. Decide which role offers the
right permissions for the application. To learn about the available roles, see RBAC: Built in Roles.
You can set the scope at the level of the subscription, resource group, or resource. Permissions are inherited to
lower levels of scope. For example, adding an application to the Reader role for a resource group means it can
read the resource group and any resources it contains.
2.1. Navigate to the level of scope you wish to assign the application to. For example, to assign a role at the
subscription scope, select All services and Subscriptions.
2.1. Select the subscription to assign the application to and store Subscription ID (○A Azure Subsctiption
ID)
If you don't see the subscription you're looking for, select global subscriptions filter. Make sure the
subscription you want is selected for the portal.
The Subscription ID created here is used in the first input
field on the WISE-PaaS Marketplace.
6 Find Out More About WISE-PaaS/EdgeSense
2.2. Select Access control (IAM).
2.3. Select Add role assignment.
2.4. Select the Owner role. By default, Azure AD applications aren't displayed in the available options. To find
your application, search for the name and select it.
2.5. Select Save to finish assigning the role. You see your application in the list of users assigned to a role for
that scope.
7 Find Out More About WISE-PaaS/EdgeSense
3. Get Tenant ID and Application ID
3.1. Select Azure Active Directory.
3.2. From App registrations in Azure AD, select your application.
3.3. Copy the Directory (tenant) ID (○C Directory (tenant) ID) and store it.
3.4. Copy the Application ID (○B Application (client) ID) and store it.
8 Find Out More About WISE-PaaS/EdgeSense
The Application (client) ID in Step 3.4 and
Directory (tenant ID) in Step 3.3 are used in the
second and third input fields on the WISE-PaaS
Marketplace.
4. Create and get Client Secret
4.1. Select Certificates & secrets.
4.2. Select Client secrets -> New client secret.
4.3. Provide a description of the secret, and a duration. When done, select Add.
9 Find Out More About WISE-PaaS/EdgeSense
After saving the client secret (○D Client Securet), the value of the client secret is displayed. Copy this
value because you aren't able to retrieve the key later.
The Client secrets is used in the fourth
input field on the WISE-PaaS Marketplace.
10 Find Out More About WISE-PaaS/EdgeSense
Method 2: Create via Azure CLI (Command-line Tool)
1. Install the Azure CLI
https://docs.microsoft.com/en-us/cli/azure/install-azure-cli?view=azure-cli-latest
2. Sign in Account and get Subscription ID
1. az login
If the CLI can open your default browser, it will do so and load a sign-in page. Otherwise, you need to
open a browser page and follow the instructions on the command line to enter an authorization code after
navigating to https://aka.ms/devicelogin in your browser. Sign in with your account credentials in the browser.
Command: (Get your Subscription Id)
1. az account show --query id
Output:
(○A Azure Subsctiption ID)
11 Find Out More About WISE-PaaS/EdgeSense
3. Create a service principal and get Application ID, Tenant ID and Client Secret
Command:
1. az ad sp create-for-rbac --name ServicePrincipalName
Output:
appId ➔ (○B Application (client) ID)
tenant ➔ (○C Directory (tenant) ID)
password (Client Secret)➔ (○D Client Securet)
Reference:
https://docs.microsoft.com/en-us/cli/azure/create-an-azure-service-principal-azure-cli?view=azure-cli-latest