Skip to main content

Azure

Scraper

Mission Control integrates with Azure to provide visibility into your cloud infrastructure.

Scraper

Discover and catalog Azure resources with full change history.

Use cases:

  • Discover and catalog VMs, Azure SQL databases, App Services, and other Azure resources
  • Track configuration changes across subscriptions and resource groups
  • Monitor resource health and correlate with Kubernetes workloads
  • Support multi-tenant environments with organization-based access
  • Build a unified catalog of Azure resources alongside other cloud providers

Getting Started​

Prerequisites

To enable the Kubernetes integration you need:

  • Mission Control installed
  • kubectl access to the Mission Control instance
  • Azure client credentials or Azure Workload Identity configured for the config-db service.

  1. Install the mission-control-azure chart

    apiVersion:  helm.toolkit.fluxcd.io/v2
    kind: HelmRelease
    metadata:
      name: mission-control-azure
      namespace: mission-control
    spec:
      chart:
        spec:
          chart: mission-control-azure
          sourceRef:
            kind: HelmRepository
            name: flanksource
            namespace: mission-control
      interval: 5m
    values:
      subscriptionID: <your-subscription-id>
      tenantID: <your-tenant-id>
    values.yaml
    • clientID:
      • name: string
      • value: string
      • valueFrom:
        • configMapKeyRef:
          • key: string
          • name: string
        • helmRef:
          • key: string
          • name: string
        • secretKeyRef:
          • key: string
          • name: string
        • serviceAccount: string
    • clientSecret:
      • name: string
      • value: string
      • valueFrom:
        • configMapKeyRef:
          • key: string
          • name: string
        • helmRef:
          • key: string
          • name: string
        • secretKeyRef:
          • key: string
          • name: string
        • serviceAccount: string
    • connection: string
    • exclusions:
      • activityLogs[]:

        description: list of operations to exclude from activity logs examples: - Microsoft.ContainerService/managedClusters/listClusterAdminCredential/action - Microsoft.ContainerService/managedClusters/listClusterUserCredential/action type: array

        - description: list of operations to exclude from activity logs examples: - Microsoft.ContainerService/managedClusters/listClusterAdminCredential/action - Microsoft.ContainerService/managedClusters/listClusterUserCredential/action type: array
    • global:

      Global values are values that can be accessed from any chart or subchart by exactly the same name.

        - Global values are values that can be accessed from any chart or subchart by exactly the same name.
      • labels: - list of labels to add the Scrape config
      • organisation: string
      • scraper:
        • name: string (default: "azure")
      • subscriptionID:
      • tenantID: string
      • transform:
        • relationship[]:

    When you go to the catalog now, you can now see all the Azure Resources

    Next Steps​

    Azure Scraper

    Azure config scraper configuration options

    Azure AD Integration

    Monitor Azure Active Directory / Entra ID