Azure

Azure connections enable integration with Microsoft Azure for health checks, configuration scraping, and playbook automation.

Used By

• Azure Config Scraper - Scrape Azure resource configurations
• Azure Blob Health Check - Check Azure Blob Storage
• Azure DevOps Pipeline - Trigger pipelines
• Playbook Actions - Execute Azure-related automation

Field	Description	Scheme
subscriptionId*	The Azure subscription ID	EnvVar
tenantId*	The Azure Active Directory tenant ID
clientId	The Azure client/application ID	EnvVar
clientSecret	The Azure client/application secret	EnvVar
connection	The connection url to use, mutually exclusive with tenantId, subscriptionId, clientId, and clientSecret	Connection

Authentication

Azure connections use service principal credentials (client ID and client secret) for authentication.

Examples

Service Principal Authentication

Create an Azure connection with service principal:

azure-connection.yaml
apiVersion: mission-control.flanksource.com/v1
kind: Connection
metadata:
  name: azure-production
  namespace: default
spec:
  azure:
    clientID:
      valueFrom:
        secretKeyRef:
          name: azure-credentials
          key: AZURE_CLIENT_ID
    clientSecret:
      valueFrom:
        secretKeyRef:
          name: azure-credentials
          key: AZURE_CLIENT_SECRET
    tenantID: your-tenant-id

With Subscription ID

Include subscription for resource access:

azure-with-subscription.yaml
apiVersion: mission-control.flanksource.com/v1
kind: Connection
metadata:
  name: azure-subscription
spec:
  azure:
    clientID:
      valueFrom:
        secretKeyRef:
          name: azure-credentials
          key: AZURE_CLIENT_ID
    clientSecret:
      valueFrom:
        secretKeyRef:
          name: azure-credentials
          key: AZURE_CLIENT_SECRET
    tenantID: your-tenant-id
    subscriptionID: your-subscription-id