IaaC with Openshift on Azure

Enabling Infrastructure as Code for Azure Redhat Openshift.

There are various ways to provision ARO on Azure. Following are some of them:

Azure CLI
Azure Portal GUI

Both the above options give very little options to actually customize your ARO cluster, for example if you want more number of worker nodes or specific sizes of the worker nodes or one or more machine sets in the cluster having machines of different specifications.

Provisioning via ARM template gives all the flexibilities and more. It also gives an option to run one or more pre or post deployment scripts to further automate the Azure landing zone setup. The ARM template in the below Github link is a working version of the template to provision ARO on an existing Azure landing zone having all the network components available:

https://github.com/sormita/AROARM

Prerequisites

Complete the following prerequisites before executing the ARO ARM template:

Create a service principal with ‘Contributor’ role:

az ad sp create-for-rbac --name sp-arm-aro --role Contributor

Following is a sample output:

{
"appId": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
"displayName": "sp-arm-aro",
"name": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
"password": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
"tenant": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
}

az provider register -n Microsoft.RedHatOpenShift --wait

For the parameter, 'rpObjectId' in the ARM template, please execute the following commands in
Azure CLI:

#az ad sp list --filter "displayname eq 'Azure Red Hat OpenShift RP'" --query "[? appDisplayName=='Azure Red Hat OpenShift RP'].{name: appDisplayName, objectId: objectId}" -o table

Get a Red Hat pull secret from Redhat website and save it to pull-secret.txt. This file should be
present in the same folder as ARM parameters.json.
Create a virtual network either using ARM template or using the following Azure CLI command:

az network vnet create \

--resource-group $RESOURCEGROUP \

--name aro-vnet \

--address-prefixes 10.0.0.0/22