ARO Quickstart
This content is authored by Red Hat experts, but has not yet been tested on every supported configuration. This guide has been validated on OpenShift 4.20. Operator CRD names, API versions, and console paths may differ on other versions.
A Quickstart guide to deploying an Azure Red Hat OpenShift cluster.
Video Walkthrough
If you prefer a more visual medium, you can watch Paul Czarkowski walk through this quickstart on YouTube .
Prerequisites
Azure CLI
Obviously you’ll need to have an Azure account to configure the CLI against.
macOS
See Install Azure CLI on macOS for alternative install options.
-
Install Azure CLI using homebrew
Linux (RHEL / Fedora / similar, using dnf)
For Ubuntu, Debian, or other distributions, use the steps in Install the Azure CLI on Linux for your package manager.
-
Import the Microsoft Keys
-
Add the Microsoft Yum Repository
-
Install Azure CLI
Prepare Azure Account for Azure OpenShift
-
Log into the Azure CLI by running the following and then authorizing through your Web Browser. If you have more than one subscription, list them and select the one where you will deploy the cluster.
-
Make sure you have enough quota in the same Azure region you plan to use for the cluster (below,
eastusmatches the defaultAZR_RESOURCE_LOCATIONused later; change both if you use another region). Confirm current vCPU requirements in Create an Azure Red Hat OpenShift cluster (prerequisites and sizing).See Addendum - Adding Quota to ARO account if you do not have enough quota left for Total Regional vCPUs (Azure Red Hat OpenShift requires a minimum of 44 cores to create a cluster; verify against current Microsoft documents).
-
Register resource providers
Get Red Hat pull secret
-
Log into https://console.redhat.com
-
Browse to https://console.redhat.com/openshift/install/azure/aro-provisioned
-
Click the Download pull secret button and save the file to a known path (for example the default
AZR_PULL_SECRETpath used below). Restrict access to the file and do not commit it to source control; for example on macOS or Linux:chmod 600 ~/Downloads/pull-secret.txt.
Deploy Azure OpenShift
Variables and Resource Group
Set some environment variables to use later, and create an Azure Resource Group.
-
Set the following environment variables
Change the values to suit your environment, but these defaults should work. Resource names must comply with Azure naming rules and length limits. Run all following commands in the same shell so the exported variables apply.
-
Create an Azure resource group
Networking
Create a virtual network with two empty subnets
-
Create virtual network
-
Create control plane subnet
-
Create machine subnet
-
Disable network policies for Private Link Service on the control plane subnet
Optional. The ARO RP will disable this for you if you skip this step. -
OpenShift version (optional)
New clusters use a supported default OpenShift version for your region unless you choose one explicitly. List the exact versions you can install (they change over time as Microsoft and Red Hat add releases):
To pin a build, add --versionwith a full version string from that output (for example4.18.12) to theaz aro createcommand below. Omit--versionto let the platform pick the default for new clusters. -
Create the cluster
This will take between 30 and 45 minutes. To create the cluster on a specific OpenShift version from
az aro get-versions, append--version X.Y.Zto the same command (use the exact string from the table for your region). -
Get OpenShift console URL
-
Get OpenShift credentials
-
Use the URL and the credentials provided by the output of the last two commands to log into OpenShift via a web browser.

-
Deploy an application to OpenShift
See the following video for a guide on easy application deployment on OpenShift.
Delete Cluster
Once you’re done it is a good idea to delete the cluster so you avoid unexpected charges.
-
Delete the cluster
The -yflag skips confirmation prompts and is convenient for lab teardown; omit it if you want to be prompted before deletion. -
Delete the Azure resource group
Only do this if there is nothing else in the resource group. az group deleteremoves all resources in that group.
Addendum
Adding Quota to ARO account

-
Set Issue Type to “Service and subscription limits (quotas)”
-
Set Quota Type to “Compute-VM (cores-vCPUs) subscription limit increases”
-
Click Next Solutions »
-
Click Enter details
-
Set Deployment Model to “Resource Manager”
-
Set Locations to “(US) East US”
-
Set Types to “Standard”
-
Under Standard check “DSv4” and “DSv5”
-
Set New vCPU Limit for each (example “60”)
-
Click Save and continue
-
Click Review + create »
-
Wait until quota is increased.