Use this topic to provision infrastructure with Microsoft Azure. After the infrastructure is in place, you can deploy Domino on Azure Kubernetes Service (AKS).

Note

Orchestrate the installation

To start a VM in your Azure environment before you have a dedicated bastion or Azure VM, use Azure Portal or Azure CLI to run the following:

az vm create \
--resource-group $RG_NAME \
--name bastion \
--image UbuntuLTS \
--admin-username azureuser \
--generate-ssh-keys

Install the packages:

apt update
curl -fsSL https://apt.releases.hashicorp.com/gpg | sudo apt-key add -
curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash
curl -fsSL https://apt.releases.hashicorp.com/gpg | sudo apt-key add -
curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
mv kubectl /usr/local/bin
chmod +x /usr/local/bin/kubectl
apt-add-repository "deb [arch=amd64] https://apt.releases.hashicorp.com $(lsb_release -cs) main"
apt-get update && sudo apt-get install terraform
apt install -y containerd docker.io

Add azureuser to the Docker group:
```
+usermod -a -G docker azureuser
```
Sign out for the group change to take effect:
```
logout
```
Sign in to the VM again.
Sign in to Azure:
```
az login
```

Provision your infrastructure with Domino’s Terraform module

Domino recommends that you use our public-facing Azure-specific Reference Terraform module. You can also reference this module to manually provision the environment and infrastructure.

Create a resource group in your Azure subscription.
Open the main.tf file and edit the following attributes:
- azurerm.subscription_id: ID of the subscription where the AKS will be deployed.
- domino-aks.api_server_authorized_ip_ranges: The IP ranges to allow incoming traffic into the server nodes. Enter null to allow all traffic.
- domino-aks.resource_group: The name of the resource group that you created in the previous step.
- domino-aks.cluster_name: The name of the AKS cluster to create.
- domino-aks.kubernetes_version: The Kubernetes version must be 1.22.x.
- domino-aks.node_pools.compute.vm_size (optional): Update if you don’t want to use DS8_v2 SKU.
- domino-aks.node_pools.compute.gpu (optional): Update if you don’t want to use the NC6s_v3 SKU.
- domino-aks.node_pools.compute.platform (optional): Update if you don’t want to use the DS8_v2 SKU.
To initialize the modules, run the following command in the same folder as main.tf:
```
terraform init
```
To start the infrastructure deployment, run the following commands:
```
terraform plan -out=terraform.plan
terraform apply terraform.plan
```

Tip

Note

Provision Infrastructure and Runtime Environment