// Module is included in the following assemblies:
//
// * observability/logging/log_storage/installing-log-storage.adoc

:_mod-docs-content-type: PROCEDURE
[id="logging-loki-storage-azure_{context}"]
= Azure storage

.Prerequisites

* You installed the {loki-op}.
* You installed the {oc-first}.
* You created a link:https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blobs-introduction[bucket] on Azure.

.Procedure

* Create an object storage secret with the name `logging-loki-azure` by running the following command:
+
[source,terminal,subs="+quotes"]
----
$ oc create secret generic logging-loki-azure \
  --from-literal=container="<azure_container_name>" \
  --from-literal=environment="<azure_environment>" \ # <1>
  --from-literal=account_name="<azure_account_name>" \
  --from-literal=account_key="<azure_account_key>"
----
<1> Supported environment values are `AzureGlobal`, `AzureChinaCloud`, `AzureGermanCloud`, or `AzureUSGovernment`.

[id="azure_storage_workload_id_{context}"]
== Azure storage for {entra-first} enabled clusters

If your cluster has {entra-first} enabled, the Cloud Credential Operator (CCO) supports short-term authentication using {entra-short}.

You can create the Loki object storage secret manually by running the following command:

[source,terminal,subs="+quotes"]
----
$ oc -n openshift-logging create secret generic logging-loki-azure \
--from-literal=environment="<azure_environment>" \
--from-literal=account_name="<storage_account_name>" \
--from-literal=container="<container_name>"
----
