(azure-install)=
# Install MLRun CE on Azure

These instructions explain how to install MLRun CE on your Azure Kubernetes Service (AKS) cluster.


**In this section**
- [Prerequisites](#prerequisites)
- [Prepare values files](#prepare-values-files)
- [Create the container registry secret](#create-the-container-registry-secret)
- [Installation](#installation)
- [Optional: Ingress configuration](#optional-ingress-configuration)
- [Uninstalling the chart](#uninstalling-the-chart)

## Prerequisites

- [Azure CLI](https://learn.microsoft.com/en-us/cli/azure/install-azure-cli) is installed and logged in (`az login`)
- [kubectl](https://kubernetes.io/docs/tasks/tools/) is configured for your AKS cluster. See [Connect to an Azure Kubernetes Service (AKS) cluster using kubectl](https://learn.microsoft.com/en-us/azure/aks/learn/quick-kubernetes-deploy-cli)
- Review the [MLRun CE installation notes](./mlrun-ce-installation-notes.md) for any additional installation steps you may need to consider.
- A bash shell to run the commands
- [Optional] If you want to store MLRun artifacts in Azure Blob Storage instead of the bundled SeaweedFS, provision an Azure Storage account and container. See [Using Azure Blob Storage for MLRun artifacts](./mlrun-ce-installation-notes.md#using-azure-blob-storage-for-mlrun-artifacts).

```{admonition} Note
The MLRun CE resources are configured initially with the default cluster/namespace resource limits. You can modify the resources from outside if needed. See [Advanced chart configuration](./mlrun-ce-installation-notes.md#advanced-chart-configuration).
```

## Prepare values files

Create `azure-values.yaml` with your container registry and storage settings.

1. Download the {download}`azure values file template <./azure-values.yaml.template>`.
2. Copy and edit `azure-values.yaml` — fill in your registry URL, secret name, and storage settings:

```yaml
storage:
  mode: "azure-blob"
  azure:
    containerName: "data"
    accountName: "<name of the storage account>"
    connectionString: "DefaultEndpointsProtocol=https;AccountName=<name of the storage>;AccountKey=<account key>;EndpointSuffix=core.windows.net"

global:
  registry:
    url: "<url of the registry>"
    secretName: "acr-registry-credentials"
```

### Storage options

MLRun CE can store MLRun artifact data in **Azure Blob Storage** instead of the default **S3-compatible (SeaweedFS)** setup used for MLRun CE. See [Using Azure Blob Storage for MLRun artifacts](./mlrun-ce-installation-notes.md#using-azure-blob-storage-for-mlrun-artifacts).

## Create the container registry secret

**Using Azure Container Registry (ACR):**

```bash
export ACR_NAME="<acr-name>"
export ACR_TOKEN=$(az acr login --name "${ACR_NAME}" --expose-token --output tsv --query accessToken)

kubectl --namespace mlrun create secret docker-registry acr-registry-credentials \
    --docker-server="<url of the registry>" \
    --docker-username="00000000-0000-0000-0000-000000000000" \
    --docker-password="${ACR_TOKEN}" \
    --docker-email="not-used@example.com"
```

The secret name must match `global.registry.secretName` in `azure-values.yaml` (default: `acr-registry-credentials`).


## Installation

1. Add the MLRun CE Helm repo:

```bash
helm repo add mlrun-ce https://mlrun.github.io/ce
helm repo update
```

2. Install MLRun CE using `azure-values.yaml`:

```bash
helm install mlrun-ce mlrun-ce/mlrun-ce \
  --namespace mlrun \
  --wait \
  --timeout 2000s \
  -f azure-values.yaml
```

## Optional: Ingress configuration

If you prefer ingress-based access instead of NodePort, optionally add `values-ingress-override.yaml` to the install command. See [Ingress Configuration](./mlrun-ce-installation-notes.md#ingress-configuration).

## Uninstalling the chart

```bash
helm --namespace mlrun uninstall mlrun-ce
```

See the [Kubernetes uninstall notes](./kubernetes-install.md#uninstalling-the-chart) for guidance on cleaning up persistent volumes and other dangling resources.