Search <book_title>...

InfoScale™ 9.0 Cluster Server Bundled Agents Reference Guide - Linux

Last Published: 2025-08-11

Product(s): InfoScale & Storage Foundation (9.0)

Platform: Linux

AzureAuth agent

You may need to perform different operations in Azure such as updating a resource record set, attaching an Azure data disk, or assigning a private IP to a network interface. Performing any operations on Azure resources requires that you authenticate yourself as an authorized Azure user.

AzureAuth agent authenticates the Azure subscription using service principal credentials.

AzureAuth agent is a persistent resource that monitors the validity of service principal credentials.

Prerequisites

Note:

For using managed identify-based authentication, refer to the following:

See Using Azure managed identity.

Create the service principal from the Azure portal and assign the application to a role. For details, refer to the Microsoft Azure documentation.
Ensure that the credentials that are passed on to the AzureAuth agent have at least the minimum required role assigned to service principal.
The minimum roles that are required for each agent are:
- AzureIP: Network Contributor and Virtual Machine Contributor
- AzureDisk
  - Un-Managed Disks: Virtual Machine Contributor
  - Managed Disks: Contributor
- AzureDNSZone: DNS Zone Contributor
Obtain the authentication keys (SubscriptionId, ClientId, SecretKey, and TenantId).
See “To obtain the Azure authentication keys”.
Ensure that the virtual machine has access to the internet, which is required to install the necessary Python modules.

Install Python SDK for Azure on all cluster nodes.

Python SDK can be installed with pip as follows:

/opt/VRTSpython/bin/pip install azure-common==1.1.28
/opt/VRTSpython/bin/pip install azure-core==1.32.0
/opt/VRTSpython/bin/pip install azure-identity==1.19.0
/opt/VRTSpython/bin/pip install azure-mgmt-core==1.5.0
/opt/VRTSpython/bin/pip install azure-mgmt-dns==8.2.0
/opt/VRTSpython/bin/pip install azure-mgmt-network==28.1.0
/opt/VRTSpython/bin/pip install azure-storage-blob==12.24.1
/opt/VRTSpython/bin/pip install msrestazure==0.6.4
/opt/VRTSpython/bin/pip install azure-mgmt-compute==29.1.0
/opt/VRTSpython/bin/pip install azure-mgmt-compute==34.0.0
/opt/VRTSpython/bin/pip install azure-mgmt-privatedns==1.2.0

To install Azure Python SDK, the following packages are required:

libffi-devel
gcc
openssl-devel

To support Azure Private DNS Zone, following API must be installed:
azure-mgmt-privatedns.

Dependency

The AzureAuth agent is not dependent on any other resources.

Agent functions

Monitor

Validates the service principal credentials with Azure.

State definitions

ONLINE	Indicates that the service principal credentials are valid.
UNKNOWN	Indicates that one of the following is true: The service principal credentials are invalid The service principal credentials were modified or deleted after the resource reported ONLINE The service principal credentials are expired

Attributes

Table: Required attributes

Attribute	Description
SubscriptionId	Identifier that uniquely identifies your Azure subscription. Type and dimension: string-scalar
ClientId	Identifier of the Azure Active Directory (AAD) Application. Type and dimension: string-scalar
SecretKey	Authentication key that is generated for the AAD application. You must encrypt this secret key using the vcsencrypt -agent command. Type and dimension: string-scalar
TenantId	Identifier of the AAD directory in which you created the application. Type and dimension: string-scalar

Resource type definition

type AzureAuth (
    static str ArgList[] = { SubscriptionId, ClientId, SecretKey, 
      TenantId }
    static str Operations = None
    str SubscriptionId
    str ClientId
    str SecretKey
    str TenantId
)

Sample configuration

AzureAuth Auth_Res (
    SubscriptionId = 2dfgg136-fgh6-40dd-b616-c1e9abdf1d63
    ClientId = 123456-d10a-4704-8986-beb86739104d
    SecretKey = fntPgnUnhTprQrqrnRonSlhPhrQpiNtrItpRhnGrrNklFngLs
    TenantId = 12345-0528-4308-brf03-6667d61dd0e3
)

Obtaining authentication keys

To obtain the Azure authentication keys

Perform the following to obtain the authentication keys :

Task	Procedure
To obtain the SubscriptionId	In the left navigation pane, click Subscriptions. A list of your subscriptions is displayed along with the subscription IDs. Copy and provide this Id as SubscriptionId to the AzureAuth agent.
To obtain the TenantID	In the left navigation panel, click Azure Active Directory. On the page that opens, click Properties. Copy the Directory ID. Provided this Id as TenantID to the AzureAuth agent.
To obtain the ClientId	In the left navigation panel, click Azure Active Directory. On the page that opens, click App registrations. Search and select your application (service principal) from the list of applications. Copy the Application ID. Provide this Id as the ClientId to the AzureAuth agent.
To obtain the SecretKey	From App registrations in Azure Active Directory, search and select your application. Under Settings, select Keys. Provide a description of the key, and the expiry duration for the key. Click Save. The key is displayed. Note: Ensure that you copy and store the key value. You cannot retrieve the key later. Encrypt the key using: vcsencrypt -agent < Secret Key>. Provide the encrypted key to the AzureAuth agent as the SecretKey.