Skip to main content
Azure credentials store an Azure service principal used to provision and manage Azure Kubernetes Service (AKS). The service principal needs the Contributor role on the target subscription so Ankra can create the cluster, node pools, and supporting resources.
Azure credentials are managed from the portal - there is no ankra credentials azure CLI command.

​
Creating an Azure Credential

1

Create a service principal

Create a service principal with Contributor on the subscription, for example with the Azure CLI:
az ad sp create-for-rbac \
  --name ankra-aks \
  --role Contributor \
  --scopes /subscriptions/<subscription-id>
Note the appId (client ID), password (client secret), and tenant.
2

Add to Ankra (UI)

Go to Credentials → Add → Azure, enter a name, and provide the subscription ID, tenant ID, client ID, and client secret. Ankra validates the service principal before storing it.