Cloudera Docs

Minimal setup for Azure cloud storage

This minimal secure setup uses one ADLS Gen2 storage account with multiple containers in it, and multiple managed identities where each managed identity has at least one role assigned.

ADSL Gen2 storage account

You must create one ADLS Gen2 storage account with one container within it for Logs Location Base. Additionally, you can specify a container for Backup Location Base to store FreeIPA backup data separately from logs.
  • One ADLS Gen2 container is required to use as Logs Location Base such as abfs://logsfs@mydatalake.dfs.core.windows.net where mydatalake is your storage account name and logsfs is your container name. The Logs Location Base is used for FreeIPA and Data Hub logs, and FreeIPA and backups.

  • (Optional) One optional ADLS Gen2 container to use as Backup Location Base such as abfs://backupfs@mydatalake.dfs.core.windows.net where mydatalake is your storage account name and backupfs is your container name. The Backup Location Base is used for FreeIPA and Data Lake backups. If a separate container is not provided, the backups are stored in the Logs Location Base.

Table 1. Logs Location Bsae examples
FreeIPA Logs

abfs://logsfs@mydatalake.dfs.core.windows.net

If your environment was created after February 2021:

abfs://logsfs@mydatalake.dfs.core.windows.net/freeipa

If your environment was created before February 2021:

abfs://logsfs@mydatalake.dfs.core.windows.net/cluster-logs/freeipa
Table 2. Backup Location Base examples
FreeIPA Backup

abfs://backupfs@mydatalake.dfs.core.windows.net

abfs://backupfs@mydatalake.dfs.core.windows.net/cluster-backups/freeipa

If you specify a separate container for FreeIPA backups, backups are written to that specific container.

If the separate container is not provided, FreeIPA backups are written to the Logs Location Base. In both cases, the same cluster-backups/freeipa directory structure is created within the container.