External content provider: Azure
Overview
This section describes how to configure the Azure Storage Service to support an RPI external content provider.
Azure account configuration
In a browser, log into https://portal.azure.com.
After logging in, you will be redirected to the Azure Portal home page.
Click Storage accounts to view the list of storage accounts for the Azure Storage service.
Select your preferred account and view its details.
Adding an Azure storage container
Having clicked Containers, you can add a container and edit its privacy settings. Add a container, and set its access type to Container. Note that if this setting is not changed files will not be accessible in RPI.
Specify a name for the container and click Create.
Select the created container in the list and start uploading/viewing files.
Azure CDN (Content Delivery Network) configuration
In a browser, log into https://portal.azure.com.
In the navigation panel, scroll down, and click More services > Front Door and CDN Profiles > Create.
Select Explore other offerings, then select Azure CDN Standard from Microsoft (classic). Click Continue.
To create a new CDN profile, complete the form’s required details and click Review + Create.
Refresh the list of CDN profiles. Once your new profile is available, select it.
To add an Endpoint, click Endpoint.
Complete the form and click Add.
Wait while the CDN endpoint is created. Refresh the list of CDN profiles to view the newly-created endpoint.
Select the endpoint and scroll down to Origin.
Use the Origin hostname to configure the Azure Storage provider’s Blob service endpoint property.
Locating the access key
Select your preferred Storage account and view its details.
In the left menu, select Access keys.
At key1, click Show, then click Copy to clipboard.
Set permissions
Click the top left menu icon and select Azure Active Directory.
Click App registrations, then New registration.
Supply a name, then click the Register button.
The App Overview page provides the Application ID and Directory (tenant) ID.
Click Certificates and secret in the left-hand menu. Click New client secret, and click Add.
Assign an App and Role to your storage container.
Go to your storage account and select the created container.
In the left menu, select Access Control (IAM).
Select Add > Add role assignment.
Complete the form:
Role - Select Storage Blob Data Contributor.
Assign access to - Leave the defaults unchanged. They should be User, group, or service principal.
Select - Start typing in the name of the app and select it from the dropdown list.
Click Save.
