> ## Documentation Index
> Fetch the complete documentation index at: https://arize-ax.mintlify.site/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Install Arize AX on Azure (quick start)

> Example values.yaml, Helm install command, and field checklist for the Arize AX operator on AKS.

## Prerequisites

* Extracted tarball with `arize-operator-chart.tgz` and `arize.sh` in the current directory ([Download and extract](/ax/selfhosting/getting-started/download-and-unpack-the-distribution)).
* `kubectl` configured for your AKS cluster ([AKS cluster and resources](/ax/selfhosting/installation/azure/cluster-existing-aks) or [Terraform](/ax/selfhosting/installation/azure/cluster-terraform)).
* For **how to gather each value**, base64 encoding, private registry image steps, and **`./arize.sh`**, use the [detailed walkthrough (Azure)](/ax/selfhosting/installation/azure/install-arize-detailed).

## Helm install

From the directory that contains `arize-operator-chart.tgz` and your `values.yaml`:

```bash theme={null}
helm upgrade --install -f values.yaml arize-op arize-operator-chart.tgz
```

## Example `values.yaml` (Azure)

Adjust placeholders for your environment. After you edit the file, use the **Minimum fields to verify** table below as a line-by-line checklist before you run Helm.

```yaml theme={null}
cloud: "azure"
clusterName: "<aks-cluster-name>"
# JWT from Arize AI, base64-encoded
hubJwt: "<JWT_BASE64>"
gazetteBucket: "<gazette-bucket-name>"
druidBucket: "<adb-bucket-name>"
# User-chosen secret, base64-encoded
postgresPassword: "<POSTGRES_PASSWORD_BASE64>"
organizationName: "<organization-or-company-name>"
# Encryption key, base64-encoded
cipherKey: "<CIPHER_KEY_BASE64>"
clusterSizing: "<sizing-option-from-arize-ai>"
# Storage account name (plain text)
azureStorageAccountName: "<storage-account-name>"
# Tenant and client ID when using Azure AD Workload Identity (plain text)
azureWorkloadIdentityTenantId: "<tenant-id>"
azureWorkloadIdentityClientId: "<managed-identity-client-id>"
collectNodeMetrics: true

# URL for the Arize AX UI after ingress is configured
appBaseUrl: "https://<arize-app.domain>"

# Optional — private registry (same hostname for both; Azure Container Registry)
pushRegistry: "<registry-name>.azurecr.io"
pullRegistry: "<registry-name>.azurecr.io"

# Optional — single shared node pool for base + historical
historicalNodePoolEnabled: false
```

## Minimum fields to verify

Before `helm upgrade --install`, confirm every row below. If a cell is unclear, jump to the matching step in the [detailed walkthrough](/ax/selfhosting/installation/azure/install-arize-detailed).

| Area     | What to set                                                                                                                                                                                                   |
| -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Identity | `hubJwt`, `organizationName`, `cipherKey`, `postgresPassword` (typically base64-encoded per chart docs)                                                                                                       |
| Azure    | `cloud: "azure"`, `clusterName`, `gazetteBucket`, `druidBucket`, `azureStorageAccountName` (plain name), `azureWorkloadIdentityTenantId`, `azureWorkloadIdentityClientId` (plain text with Workload Identity) |
| Sizing   | `clusterSizing` from Arize AI                                                                                                                                                                                 |
| UI URL   | `appBaseUrl` once you know the hostname (can be updated after ingress)                                                                                                                                        |

## Workload Identity

Keep `azureWorkloadIdentityEnabled: true` unless your platform requires a storage account key. When Workload Identity is disabled, set `azureStorageAccountKey` to the access key string, base64-encoded—see the [detailed walkthrough](/ax/selfhosting/installation/azure/install-arize-detailed).

Omit or leave unset `azureStorageAccountKey` when using Workload Identity; omit tenant/client IDs when using the key-only path.

## Next steps

* [Configure ingress — Azure load balancer](/ax/selfhosting/installation/azure/ingress-azure-load-balancer) or [other controllers](/ax/selfhosting/installation/ingress/other-controllers)
* [Validate the deployment](/ax/selfhosting/installation/validate-deployment)

## Related

* [Detailed walkthrough (Azure)](/ax/selfhosting/installation/azure/install-arize-detailed) — step-by-step values, `arize.sh`, and optional mirroring