Add your Microsoft Azure account to Northflank

To add a new cloud provider integration navigate to the clusters page in your account settings.

You can add credentials when creating a new cluster, or create a new integration on its own. In both cases you will be able to use the saved credentials to create new clusters in the future.

You must have sufficient resource quotas available on your cloud platform to deploy a cluster using Northflank.

It is recommended that you create a new Azure Active Directory application to integrate with Northflank:

1. Navigate to your Northflank account settings and open the clusters page
2. Create a new integration, or create a new cluster and select new credentials . Select Azure as the provider.
3. Open Azure Portal and navigate to Azure Entra ID
4. Register a new application with Azure AD from the add menu, or from the app registrations page. Copy the the directory (tenant) ID and the application (client) ID to the Northflank form.
5. In your new application click the link for managed application in local directory (your application's name) and copy the application's object ID from properties to Northflank.
6. Go back to your application overview and open the certificates and secrets page. Create a new client secret, and copy the secret value (not the secret ID) to Northflank.
7. Navigate to subscriptions and select an existing subscription, or create a new one. For security, the subscription you use with Northflank should have only the necessary permissions allocated to it.
8. Open access control (IAM) and add a new role assignment to the subscription. Select the contributor role from privileged administrator roles, and then add your Active Directory application as a member.
9. Open resource providers in your subscription, search for and select the provider Microsoft.ContainerService. Click register to add the provider to the subscription.
10. Copy the subscription ID to Northflank
11. Create the integration or continue configuring your new cluster. Your credentials will be saved as a new integration when you create the new cluster.

You can edit the integration at any time to update the secrets, if required. If the new secrets do not have permission to manage existing clusters, you will be unable to edit those clusters and deleting them via Azure Active Directory may leave orphaned resources.