Merge pull request #19831 from codyhoag/azure-upi

OSDOCS-775 Installing cluster on Azure UPI

Author: codyhoag

_topic_map.yml

@@ -133,6 +133,8 @@ Topics:
     File: installing-azure-vnet
   - Name: Installing a private cluster on Azure
     File: installing-azure-private
+  - Name: Installing a cluster on Azure using ARM templates
+    File: installing-azure-user-infra
   - Name: Uninstalling a cluster on Azure
     File: uninstalling-cluster-azure
 - Name: Installing on GCP

installing/install_config/installation-types.adoc

@@ -68,7 +68,7 @@ Not all installation options are currently available for all platforms, as shown
 
 |Custom
 |xref:../../installing/installing_aws/installing-aws-user-infra.adoc#installing-aws-user-infra[X]
-|
+|xref:../../installing/installing_azure/installing-azure-user-infra.adoc#installing-azure-user-infra[X]
 |xref:../../installing/installing_gcp/installing-gcp-user-infra.adoc#installing-gcp-user-infra[X]
 |
 |xref:../../installing/installing_bare_metal/installing-bare-metal.adoc#installing-bare-metal[X]

installing/installing_azure/installing-azure-user-infra.adoc

@@ -0,0 +1,126 @@
+[id="installing-azure-user-infra"]
+= Installing a cluster on Azure using ARM templates
+include::modules/common-attributes.adoc[]
+:context: installing-azure-user-infra
+
+toc::[]
+
+In {product-title} version {product-version}, you can install a cluster on
+Microsoft Azure by using infrastructure that you provide.
+
+Several
+link:https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/overview[Azure Resource Manager]
+(ARM) templates are provided to assist in completing these steps or to help
+model your own. You can also create the required resources through other
+methods; the templates are just an example.
+
+.Prerequisites
+
+* Review details about the
+xref:../../architecture/architecture-installation.adoc#architecture-installation[{product-title} installation and update]
+processes.
+* xref:../../installing/installing_azure/installing-azure-account.adoc#installing-azure-account[Configure an Azure account]
+to host the cluster.
+* Download the Azure CLI and install it on your computer. See
+link:https://docs.microsoft.com/en-us/cli/azure/install-azure-cli?view=azure-cli-latest[Install the Azure CLI]
+in the Azure documentation. The documentation below was last tested using
+version `2.2.0` of the Azure CLI. Azure CLI commands might perform differently
+based on the version you use.
+* If you use a firewall and plan to use telemetry, you must
+xref:../../installing/install_config/configuring-firewall.adoc#configuring-firewall[configure the firewall to allow the sites] that your cluster requires access to.
++
+[NOTE]
+====
+Be sure to also review this site list if you are configuring a proxy.
+====
+
+include::modules/cluster-entitlements.adoc[leveloffset=+1]
+
+[id="installation-azure-user-infra-config-project"]
+== Configuring your Azure project
+
+Before you can install {product-title}, you must configure an Azure project to
+host it.
+
+[IMPORTANT]
+====
+All Azure resources that are available through public endpoints are subject to
+resource name restrictions, and you cannot create resources that use certain
+terms. For a list of terms that Azure restricts, see
+link:https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-reserved-resource-name[Resolve reserved resource name errors]
+in the Azure documentation.
+====
+
+include::modules/installation-azure-limits.adoc[leveloffset=+2]
+include::modules/installation-azure-network-config.adoc[leveloffset=+2]
+
+You can view Azure's DNS solution by visiting this
+xref:installation-azure-create-dns-zones_{context}[example for creating DNS zones].
+
+include::modules/installation-azure-increasing-limits.adoc[leveloffset=+2]
+
+[id="csr-management-azure_{context}"]
+=== Certificate signing requests management
+
+Because your cluster has limited access to automatic machine management when you
+use infrastructure that you provision, you must provide a mechanism for approving
+cluster certificate signing requests (CSRs) after installation. The
+`kube-controller-manager` only approves the kubelet client CSRs. The
+`machine-approver` cannot guarantee the validity of a serving certificate
+that is requested by using kubelet credentials because it cannot confirm that
+the correct machine issued the request. You must determine and implement a
+method of verifying the validity of the kubelet serving certificate requests
+and approving them.
+
+include::modules/installation-azure-permissions.adoc[leveloffset=+2]
+include::modules/installation-azure-service-principal.adoc[leveloffset=+2]
+include::modules/installation-azure-regions.adoc[leveloffset=+2]
+
+include::modules/installation-obtaining-installer.adoc[leveloffset=+1]
+
+include::modules/ssh-agent-using.adoc[leveloffset=+1]
+
+include::modules/installation-user-infra-generate.adoc[leveloffset=+1]
+include::modules/installation-initializing.adoc[leveloffset=+2]
+include::modules/installation-configure-proxy.adoc[leveloffset=+2]
+include::modules/installation-user-infra-exporting-common-variables-arm-templates.adoc[leveloffset=+2]
+include::modules/installation-user-infra-generate-k8s-manifest-ignition.adoc[leveloffset=+2]
+
+include::modules/installation-azure-create-resource-group-and-identity.adoc[leveloffset=+1]
+
+include::modules/installation-azure-user-infra-uploading-rhcos.adoc[leveloffset=+1]
+
+include::modules/installation-azure-create-dns-zones.adoc[leveloffset=+1]
+
+You can learn more about xref:installation-azure-network-config_{context}[configuring a public DNS zone in Azure]
+by visiting that section.
+
+include::modules/installation-creating-azure-vnet.adoc[leveloffset=+1]
+include::modules/installation-arm-vnet.adoc[leveloffset=+2]
+
+include::modules/installation-azure-user-infra-deploying-rhcos.adoc[leveloffset=+1]
+include::modules/installation-arm-image-storage.adoc[leveloffset=+2]
+
+include::modules/installation-creating-azure-dns.adoc[leveloffset=+1]
+include::modules/installation-arm-dns.adoc[leveloffset=+2]
+
+include::modules/installation-creating-azure-bootstrap.adoc[leveloffset=+1]
+include::modules/installation-arm-bootstrap.adoc[leveloffset=+2]
+
+include::modules/installation-creating-azure-control-plane.adoc[leveloffset=+1]
+include::modules/installation-arm-control-plane.adoc[leveloffset=+2]
+
+include::modules/installation-azure-user-infra-wait-for-bootstrap.adoc[leveloffset=+1]
+
+include::modules/installation-creating-azure-worker.adoc[leveloffset=+1]
+include::modules/installation-arm-worker.adoc[leveloffset=+2]
+
+include::modules/cli-installing-cli.adoc[leveloffset=+1]
+
+include::modules/cli-logging-in-kubeadmin.adoc[leveloffset=+1]
+
+include::modules/installation-approve-csrs.adoc[leveloffset=+1]
+
+include::modules/installation-azure-create-ingress-dns-records.adoc[leveloffset=+1]
+
+include::modules/installation-azure-user-infra-completing.adoc[leveloffset=+1]

modules/cli-installing-cli.adoc

@@ -11,6 +11,7 @@
 // * installing/installing_azure/installing-azure-default.adoc
 // * installing/installing_azure/installing-azure-private.adoc
 // * installing/installing_azure/installing-azure-vnet.adoc
+// * installing/installing_azure/installing-azure-user-infra.adoc
 // * installing/installing_bare_metal/installing-bare-metal.adoc
 // * installing/installing_gcp/installing-gcp-customizations.adoc
 // * installing/installing_gcp/installing-gcp-private.adoc

modules/cli-logging-in-kubeadmin.adoc

@@ -10,6 +10,7 @@
 // * installing/installing_azure/installing-azure-default.adoc
 // * installing/installing_azure/installing-azure-private.adoc
 // * installing/installing_azure/installing-azure-vnet.adoc
+// * installing/installing_azure/installing-azure-user-infra.adoc
 // * installing/installing_bare_metal/installing-bare-metal.adoc
 // * installing/installing_gcp/installing-gcp-customizations.adoc
 // * installing/installing_gcp/installing-gcp-private.adoc

modules/cluster-entitlements.adoc

@@ -11,6 +11,7 @@
 // * installing/installing_azure/installing-azure-default.adoc
 // * installing/installing_azure/installing-azure-private.adoc
 // * installing/installing_azure/installing-azure-vnet.adoc
+// * installing/installing_azure/installing-azure-user-infra.adoc
 // * installing/installing_bare_metal/installing-bare-metal.adoc
 // * installing/installing_gcp/installing-gcp-customizations.adoc
 // * installing/installing_gcp/installing-gcp-private.adoc

modules/installation-approve-csrs.adoc

@@ -1,6 +1,7 @@
 // Module included in the following assemblies:
 //
 // * installing/installing_aws/installing-aws-user-infra.adoc
+// * installing/installing_azure/installing-azure-user-infra.adoc
 // * installing/installing_gcp/installing-gcp-user-infra.adoc
 // * installing/installing_gcp/installing-gcp-restricted-networks.adoc
 // * installing/installing_bare_metal/installing-bare-metal.adoc