Azure cloud access configuration

To configure BMC AMI Cloud for Azure cloud access, use the following procedure:

1. Collect the following required information:
   • Storage account name—Document the storage account name that you created for BMC AMI Cloud (for example, amiclouddemoaccount).
   • Container name—Document the container name (for example, amicloud-demo-container).

   • Storage account URL—On the Azure portal, select the container that you created for BMC AMI Cloud and go to Properties. A URL for the container is displayed in the following format: https://<StorageAccountName>.blob.core.windows.net/<containerName>. (For example, https://amiclouddemoaccount.blob.core.windows.net/amicloud-demo-container.)

     Warning

     Important

     When configuring BMC AMI Cloud, do not include the container name in the URL. For example, https://amiclouddemoaccount.blob.core.windows.net/amicloud-demo-container.

   • Application secret—Make sure that you have the secret created on the previous steps. if not, repeat this step and collect the secret. For example, on~bO.B_R_uzip3u3OKdw7gUDV92s_z4_F.
   • Application and Tenant ID—On the Azure portal, go to the Azure active directory and App registration. Select the BMC AMI Cloud application and go to the overview tab. The application (client) ID and directory (tenant) ID is available on the top of the screen. For example, Application (client) ID: a7819e18-fdca-4b23-9d7c-04e0ba392bfcDirectory (tenant) ID: f3a811d8-2e40-4a50-8a88-84317dbf578b

2. Server configuration—The server configuration should have the exact same cloud values. You must configure the following agent parameters on the model9-local.yml file on the Linux server under /data/model9/conf/model9-local.yml.

   model9.objstore.endpoint.api.id: azureblob-oauth2model9.objstore.jclouds-config.jclouds.oauth.audience: https://storage.azure.com/model9.objstore.jclouds-config.jclouds.oauth.credential-type: clientCredentialsSecretmodel9.objstore.endpoint.url: <Storage account URL>model9.objstore.resources.container.name: <Container Name>model9.objstore.jclouds-config.jclouds.azureblob-oauth2.storageaccount: <Storage Account Name>model9.objstore.jclouds-config.oauth.endpoint: https://login.microsoftonline.com/<Tenant ID>/oauth2/tokenmodel9.objstore.endpoint.userid: <Application ID>model9.objstore.endpoint.password: <Application Secret>

   According to the examples in this document, the parameters should look like this:

   model9.objstore.endpoint.api.id: azureblob-oauth2model9.objstore.jclouds-config.jclouds.oauth.audience: https://storage.azure.com/model9.objstore.jclouds-config.jclouds.oauth.credential-type: clientCredentialsSecretmodel9.objstore.endpoint.url: https://model9demoaccount.blob.core.windows.netmodel9.objstore.resources.container.name: model9-demo-containermodel9.objstore.jclouds-config.jclouds.azureblob-oauth2.storageaccount: model9demoaccountmodel9.objstore.jclouds-config.oauth.endpoint: https://login.microsoftonline.com/f3a811d8-2e40-4a50-8a88-84317dbf578b/oauth2/tokenmodel9.objstore.endpoint.userid: a7819e18-fdca-4b23-9d7c-04e0ba392bfcmodel9.objstore.endpoint.password: on~bO.B_R_uzip3u3OKdw7gUDV92s_z4_F

   The server parameters are prefixed with model9.

3. Agent configuration—In order to configure the BMC AMI Cloud agent cloud definitions, you need the information collected above. Configure the following agent parameters in the agent.yml configuration file under /usr/lpp/model9/conf/agent.yml:

   objstore.endpoint.api.id: azureblob-oauth2
   objstore.jclouds-config.jclouds.oauth.audience: https://storage.azure.com/
   objstore.jclouds-config.jclouds.oauth.credential-type: clientCredentialsSecret
   objstore.endpoint.url: <Storage account URL>
   objstore.resources.container.name: <Container Name>
   objstore.jclouds-config.jclouds.azureblob-oauth2.storageaccount: <Storage Account Name>
   objstore.jclouds-config.oauth.endpoint: https://login.microsoftonline.com/<Tenant ID>/oauth2/token
   objstore.endpoint.userid: <Application ID>
   objstore.endpoint.password: <Application Secret>

   According to the examples in this document, the parameters should look like this:

   objstore.endpoint.api.id: azureblob-oauth2
   objstore.jclouds-config.jclouds.oauth.audience: https://storage.azure.com/
   objstore.jclouds-config.jclouds.oauth.credential-type: clientCredentialsSecret
   objstore.endpoint.url: https://model9demoaccount.blob.core.windows.net
   objstore.resources.container.name: model9-demo-container
   objstore.jclouds-config.jclouds.azureblob-oauth2.storageaccount: model9demoaccount
   objstore.jclouds-config.oauth.endpoint: https://login.microsoftonline.com/f3a811d8-2e40-4a50-8a88-84317dbf578b/oauth2/token
   objstore.endpoint.userid: a7819e18-fdca-4b23-9d7c-04e0ba392bfc
   objstore.endpoint.password: on~bO.B_R_uzip3u3OKdw7gUDV92s_z4_F