• Terraform Module to create an ARO Cluster
• PreRequisites
• Create a service principal
• Retrieve ObjectId
• Retrieve resource provider ID for Red Hat Openshift
• create ARO cluster

Terraform Module to create an ARO Cluster

A HashiCorp Terraform module to create a Microsoft Azure Red Hat OpenShift (ARO) cluster.

PreRequisites

• Azure account subscription
• Increase subscription quotas by raising a serive request (for this example: increase the Resources DSv3 Series to 50 and DSv4 Series to 50 for the region you chose)
• Azure cli (https://docs.microsoft.com/en-us/cli/azure/install-azure-cli)
• Terraform cli (https://www.terraform.io/downloads.html)
• Pull Secret from RedHat (https://cloud.redhat.com/openshift/install/azure/installer-provisioned)

Create a service principal

az ad sp create-for-rbac --role="Contributor" --name myServicePrincipal

These values from the output should be passed to the below variables in Variables.tf file

• value from appID to aro_client_id
• value from password to aro_client_secret

Output

{
  "appId": "xxxxx-xxxxx-xxxx-xxxx-xxxxxx", 
  "displayName": "myServicePrincipal",     
  "name": "http://myServicePrincipal",
  "password": "xxxxxxxx-xxxxxxx",          
  "tenant": "xxxxx-xxxxx-xxxxxx-xxxxxx-xxxxxxx" 
}

This will output the appid/clientid and the client secret that are required for authentication

Retrieve ObjectId

ObjecctId of the service principal can be retrieved by using the command

az ad sp list --display-name `NameprovidedtocreateSP` --query '[].{objectid:objectId}'

Example

This value should be passed to variable aro_client_object_id in Variables.tf file

az ad sp list --display-name myServicePrincipal --query '[].{objectid:objectId}' 
[
  {
    "objectid": "xxxxx-xxxxx-xxxxx-xxxxx-xxxxxxxx"  
  }
]

Retrieve resource provider ID for Red Hat Openshift

Get the resource provider object id for Red Hat OpenShift using the command below.

az ad sp list --display-name "Azure Red Hat OpenShift RP" --query '[].{objectid:objectId}' --output table

Example

This value should be passed to variable aro_rp_object_id in Variables.tf file

az ad sp list --display-name "Azure Red Hat OpenShift RP" --query '[].{objectid:objectId}' --output table



Objectid
------------------------------------
xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx  

create ARO cluster

Update the variables.tf file with the values retrieved above and run

• terraform init
• terraform plan
• terraform apply --auto-approve

Author: Rakesh Kumar Mallam