# Azure AKS

Sprinkle requires AKS cluster for data ingestion and processing. This is required to process all your data locally within your Azure private network.

Follow the below steps to create and configure AKS cluster:

### **STEP-1: Create AKS Cluster**

Create a AKS Standard cluster with all default settings with following configuration:

**Networking**

* Enable private cluster (if Sprinkle VM is in the same virtual private network)
* Select virtual network of the sprinkle VM

### STEP-2: Generate user token

Sprinkle authenticates to AKS cluster using kubernetes user token. Follow below steps to generate User token:

* Install kubectl and azure CLI
* Generate \~/.kube/config file: 

```
az aks get-credentials --resource-group <resourcegroup-name> --name <aks-cluster-name>
```

* To verify the setup, run kubectl command to fetch running nodes:

```
kubectl get nodes
```

* Create namespace

```
kubectl create namespace sprinkle
```

* Create Admin User In kubernetes: Create file service-account-create.yml:&#x20;

```
apiVersion: v1
kind: ServiceAccount
metadata:
  name: sprinkle-admin-user
  namespace: sprinkle
```

```shell
kubectl apply -f service-account-create.yml
```

* Create ClusterRoleBinding: create a file role-binding.yml:&#x20;

```
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: sprinkle-admin-user
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
- kind: ServiceAccount
  name: sprinkle-admin-user
  namespace: sprinkle
```

```
kubectl apply -f role-binding.yml
```

* To create a long-lived API token for a ServiceAccount, you create a new secret file ***sprinkle-admin-secret.yml*** with a special annotation, *`kubernetes.io/service-account.name`*:

```
apiVersion: v1
kind: Secret
metadata:
  name: sprinkle-admin-secret
  namespace: sprinkle
  annotations:
    kubernetes.io/service-account.name: sprinkle-admin-user
type: kubernetes.io/service-account-token
```

```
kubectl apply -f sprinkle-admin-secret.yml
```

* User token Token will be printed by this command, note down the generated token:

```
kubectl describe secrets/sprinkle-admin-secret -n sprinkle
```

### Get Cluster CA Certificate

```
kubectl get cm kube-root-ca.crt -o jsonpath="{['data']['ca\.crt']}"
```