Figured it out. I needed to add to the cluster_definition section this block:

configurations={
    "gateway": {
      "restAuthCredential.isEnabled": True,
      "restAuthCredential.username": "clusteruser",
      "restAuthCredential.password": password
    }
}

Hopefully, Azure will update the error to be more descriptive.