{"action":"created","comment":{"url":"https://api.github.com/repos/giantswarm/docs/pulls/comments/207494279","pull_request_review_id":143117737,"id":207494279,"node_id":"MDI0OlB1bGxSZXF1ZXN0UmV2aWV3Q29tbWVudDIwNzQ5NDI3OQ==","diff_hunk":"@@ -0,0 +1,119 @@\n++++\n+title = \"Prepare an Azure subscription to run Giant Swarm guest clusters\"\n+description = \"This guide will walk you through all necessary steps to set up an Azure subscription with approriate Role definition and Service Principal for operating Giant Swarm guest clusters.\"\n+date = \"2018-08-09\"\n+type = \"page\"\n+weight = 100\n+tags = [\"tutorial\"]\n++++\n+\n+# Prepare an Azure subscription to run Giant Swarm guest clusters\n+\n+In a Giant Swarm installation the guest clusters (the clusters running your Kubernetes workloads) can run in a separate Azure subscription from the host cluster. This gives greater flexibility depending on the requirements and the use case. For example, it allows the host cluster to be running in one Azure subscription, while guest clusters operate in different Azure subscriptions, depending on a customer’s department using them.\n+\n+Giant Swarm operates guest clusters using a service called `azure-operator` which runs on the host cluster.\n+\n+## Overview\n+\n+In order to run Giant Swarm guest clusters, an Azure subscription needs the following elements:\n+\n+- Role definition: a set of permission to operate guest clusters in the Azure subscription.\n+- Service Principal: an identity (bound to the previously defined Role definition) to access the Azure subscription.\n+\n+## Create Azure Role definition and Service Principal\n+\n+In order to perform necessary actions to deploy and maintain guest clusters in your Azure subscription, `azure-operator` needs to access the subscription using a Service Principal.\n+Here we describe all the steps to set it up.\n+\n+#### 1. Prerequisites\n+\n+To create a Service Principal you need:\n+\n+- An account with [Owner](https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#owner) or [User Access Administrator](User Access Administrator) role.\n+- [Azure CLI](https://docs.microsoft.com/en-us/cli/azure/install-azure-cli) installed.\n+\n+#### 2. Role definition\n+\n+Download our [Role definition template](https://raw.githubusercontent.com/giantswarm/azure-operator/master/policies/guest.tmpl.json).","path":"src/content/guides/prepare-azure-subscription-for-guest-clusters/index.md","position":37,"original_position":37,"commit_id":"67a22249a34097444c063a7cf928ccaffb9583e3","original_commit_id":"ebcbb47dcb2b774a56e468533112f2d39881d8d7","user":{"login":"TheoBrigitte","id":6536819,"node_id":"MDQ6VXNlcjY1MzY4MTk=","avatar_url":"https://avatars1.githubusercontent.com/u/6536819?v=4","gravatar_id":"","url":"https://api.github.com/users/TheoBrigitte","html_url":"https://github.com/TheoBrigitte","followers_url":"https://api.github.com/users/TheoBrigitte/followers","following_url":"https://api.github.com/users/TheoBrigitte/following{/other_user}","gists_url":"https://api.github.com/users/TheoBrigitte/gists{/gist_id}","starred_url":"https://api.github.com/users/TheoBrigitte/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TheoBrigitte/subscriptions","organizations_url":"https://api.github.com/users/TheoBrigitte/orgs","repos_url":"https://api.github.com/users/TheoBrigitte/repos","events_url":"https://api.github.com/users/TheoBrigitte/events{/privacy}","received_events_url":"https://api.github.com/users/TheoBrigitte/received_events","type":"User","site_admin":false},"body":"fixed","created_at":"2018-08-03T09:42:28Z","updated_at":"2018-08-03T09:42:28Z","html_url":"https://github.com/giantswarm/docs/pull/242#discussion_r207494279","pull_request_url":"https://api.github.com/repos/giantswarm/docs/pulls/242","author_association":"NONE","_links":{"self":{"href":"https://api.github.com/repos/giantswarm/docs/pulls/comments/207494279"},"html":{"href":"https://github.com/giantswarm/docs/pull/242#discussion_r207494279"},"pull_request":{"href":"https://api.github.com/repos/giantswarm/docs/pulls/242"}},"in_reply_to_id":207490381},"pull_request":{"url":"https://api.github.com/repos/giantswarm/docs/pulls/242","id":205373858,"node_id":"MDExOlB1bGxSZXF1ZXN0MjA1MzczODU4","html_url":"https://github.com/giantswarm/docs/pull/242","diff_url":"https://github.com/giantswarm/docs/pull/242.diff","patch_url":"https://github.com/giantswarm/docs/pull/242.patch","issue_url":"https://api.github.com/repos/giantswarm/docs/issues/242","number":242,"state":"open","locked":false,"title":"add Guide to prepare an Azure BYOC account","user":{"login":"TheoBrigitte","id":6536819,"node_id":"MDQ6VXNlcjY1MzY4MTk=","avatar_url":"https://avatars1.githubusercontent.com/u/6536819?v=4","gravatar_id":"","url":"https://api.github.com/users/TheoBrigitte","html_url":"https://github.com/TheoBrigitte","followers_url":"https://api.github.com/users/TheoBrigitte/followers","following_url":"https://api.github.com/users/TheoBrigitte/following{/other_user}","gists_url":"https://api.github.com/users/TheoBrigitte/gists{/gist_id}","starred_url":"https://api.github.com/users/TheoBrigitte/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TheoBrigitte/subscriptions","organizations_url":"https://api.github.com/users/TheoBrigitte/orgs","repos_url":"https://api.github.com/users/TheoBrigitte/repos","events_url":"https://api.github.com/users/TheoBrigitte/events{/privacy}","received_events_url":"https://api.github.com/users/TheoBrigitte/received_events","type":"User","site_admin":false},"body":"Towards: giantswarm/giantswarm#2652\r\n\r\nDescribe how to setup an Azure account for BYOC.","created_at":"2018-08-01T10:08:11Z","updated_at":"2018-08-03T09:42:28Z","closed_at":null,"merged_at":null,"merge_commit_sha":"031fef276060a71c8e30f70ee91f2ae6aaddc67c","assignee":{"login":"TheoBrigitte","id":6536819,"node_id":"MDQ6VXNlcjY1MzY4MTk=","avatar_url":"https://avatars1.githubusercontent.com/u/6536819?v=4","gravatar_id":"","url":"https://api.github.com/users/TheoBrigitte","html_url":"https://github.com/TheoBrigitte","followers_url":"https://api.github.com/users/TheoBrigitte/followers","following_url":"https://api.github.com/users/TheoBrigitte/following{/other_user}","gists_url":"https://api.github.com/users/TheoBrigitte/gists{/gist_id}","starred_url":"https://api.github.com/users/TheoBrigitte/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TheoBrigitte/subscriptions","organizations_url":"https://api.github.com/users/TheoBrigitte/orgs","repos_url":"https://api.github.com/users/TheoBrigitte/repos","events_url":"https://api.github.com/users/TheoBrigitte/events{/privacy}","received_events_url":"https://api.github.com/users/TheoBrigitte/received_events","type":"User","site_admin":false},"assignees":[{"login":"TheoBrigitte","id":6536819,"node_id":"MDQ6VXNlcjY1MzY4MTk=","avatar_url":"https://avatars1.githubusercontent.com/u/6536819?v=4","gravatar_id":"","url":"https://api.github.com/users/TheoBrigitte","html_url":"https://github.com/TheoBrigitte","followers_url":"https://api.github.com/users/TheoBrigitte/followers","following_url":"https://api.github.com/users/TheoBrigitte/following{/other_user}","gists_url":"https://api.github.com/users/TheoBrigitte/gists{/gist_id}","starred_url":"https://api.github.com/users/TheoBrigitte/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TheoBrigitte/subscriptions","organizations_url":"https://api.github.com/users/TheoBrigitte/orgs","repos_url":"https://api.github.com/users/TheoBrigitte/repos","events_url":"https://api.github.com/users/TheoBrigitte/events{/privacy}","received_events_url":"https://api.github.com/users/TheoBrigitte/received_events","type":"User","site_admin":false}],"requested_reviewers":[],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/giantswarm/docs/pulls/242/commits","review_comments_url":"https://api.github.com/repos/giantswarm/docs/pulls/242/comments","review_comment_url":"https://api.github.com/repos/giantswarm/docs/pulls/comments{/number}","comments_url":"https://api.github.com/repos/giantswarm/docs/issues/242/comments","statuses_url":"https://api.github.com/repos/giantswarm/docs/statuses/67a22249a34097444c063a7cf928ccaffb9583e3","head":{"label":"giantswarm:azure-byoc","ref":"azure-byoc","sha":"67a22249a34097444c063a7cf928ccaffb9583e3","user":{"login":"giantswarm","id":7556340,"node_id":"MDEyOk9yZ2FuaXphdGlvbjc1NTYzNDA=","avatar_url":"https://avatars3.githubusercontent.com/u/7556340?v=4","gravatar_id":"","url":"https://api.github.com/users/giantswarm","html_url":"https://github.com/giantswarm","followers_url":"https://api.github.com/users/giantswarm/followers","following_url":"https://api.github.com/users/giantswarm/following{/other_user}","gists_url":"https://api.github.com/users/giantswarm/gists{/gist_id}","starred_url":"https://api.github.com/users/giantswarm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/giantswarm/subscriptions","organizations_url":"https://api.github.com/users/giantswarm/orgs","repos_url":"https://api.github.com/users/giantswarm/repos","events_url":"https://api.github.com/users/giantswarm/events{/privacy}","received_events_url":"https://api.github.com/users/giantswarm/received_events","type":"Organization","site_admin":false},"repo":{"id":30184278,"node_id":"MDEwOlJlcG9zaXRvcnkzMDE4NDI3OA==","name":"docs","full_name":"giantswarm/docs","owner":{"login":"giantswarm","id":7556340,"node_id":"MDEyOk9yZ2FuaXphdGlvbjc1NTYzNDA=","avatar_url":"https://avatars3.githubusercontent.com/u/7556340?v=4","gravatar_id":"","url":"https://api.github.com/users/giantswarm","html_url":"https://github.com/giantswarm","followers_url":"https://api.github.com/users/giantswarm/followers","following_url":"https://api.github.com/users/giantswarm/following{/other_user}","gists_url":"https://api.github.com/users/giantswarm/gists{/gist_id}","starred_url":"https://api.github.com/users/giantswarm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/giantswarm/subscriptions","organizations_url":"https://api.github.com/users/giantswarm/orgs","repos_url":"https://api.github.com/users/giantswarm/repos","events_url":"https://api.github.com/users/giantswarm/events{/privacy}","received_events_url":"https://api.github.com/users/giantswarm/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/giantswarm/docs","description":"A web application driving the Giant Swarm documentation site, using HUGO","fork":false,"url":"https://api.github.com/repos/giantswarm/docs","forks_url":"https://api.github.com/repos/giantswarm/docs/forks","keys_url":"https://api.github.com/repos/giantswarm/docs/keys{/key_id}","collaborators_url":"https://api.github.com/repos/giantswarm/docs/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/giantswarm/docs/teams","hooks_url":"https://api.github.com/repos/giantswarm/docs/hooks","issue_events_url":"https://api.github.com/repos/giantswarm/docs/issues/events{/number}","events_url":"https://api.github.com/repos/giantswarm/docs/events","assignees_url":"https://api.github.com/repos/giantswarm/docs/assignees{/user}","branches_url":"https://api.github.com/repos/giantswarm/docs/branches{/branch}","tags_url":"https://api.github.com/repos/giantswarm/docs/tags","blobs_url":"https://api.github.com/repos/giantswarm/docs/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/giantswarm/docs/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/giantswarm/docs/git/refs{/sha}","trees_url":"https://api.github.com/repos/giantswarm/docs/git/trees{/sha}","statuses_url":"https://api.github.com/repos/giantswarm/docs/statuses/{sha}","languages_url":"https://api.github.com/repos/giantswarm/docs/languages","stargazers_url":"https://api.github.com/repos/giantswarm/docs/stargazers","contributors_url":"https://api.github.com/repos/giantswarm/docs/contributors","subscribers_url":"https://api.github.com/repos/giantswarm/docs/subscribers","subscription_url":"https://api.github.com/repos/giantswarm/docs/subscription","commits_url":"https://api.github.com/repos/giantswarm/docs/commits{/sha}","git_commits_url":"https://api.github.com/repos/giantswarm/docs/git/commits{/sha}","comments_url":"https://api.github.com/repos/giantswarm/docs/comments{/number}","issue_comment_url":"https://api.github.com/repos/giantswarm/docs/issues/comments{/number}","contents_url":"https://api.github.com/repos/giantswarm/docs/contents/{+path}","compare_url":"https://api.github.com/repos/giantswarm/docs/compare/{base}...{head}","merges_url":"https://api.github.com/repos/giantswarm/docs/merges","archive_url":"https://api.github.com/repos/giantswarm/docs/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/giantswarm/docs/downloads","issues_url":"https://api.github.com/repos/giantswarm/docs/issues{/number}","pulls_url":"https://api.github.com/repos/giantswarm/docs/pulls{/number}","milestones_url":"https://api.github.com/repos/giantswarm/docs/milestones{/number}","notifications_url":"https://api.github.com/repos/giantswarm/docs/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/giantswarm/docs/labels{/name}","releases_url":"https://api.github.com/repos/giantswarm/docs/releases{/id}","deployments_url":"https://api.github.com/repos/giantswarm/docs/deployments","created_at":"2015-02-02T11:36:15Z","updated_at":"2018-08-02T10:09:20Z","pushed_at":"2018-08-03T09:31:52Z","git_url":"git://github.com/giantswarm/docs.git","ssh_url":"git@github.com:giantswarm/docs.git","clone_url":"https://github.com/giantswarm/docs.git","svn_url":"https://github.com/giantswarm/docs","homepage":"http://docs.giantswarm.io/","size":10743,"stargazers_count":0,"watchers_count":0,"language":"CSS","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":7,"license":null,"forks":0,"open_issues":7,"watchers":0,"default_branch":"master"}},"base":{"label":"giantswarm:master","ref":"master","sha":"2ed94ba3cf1a3b62df86ac2c955cf4216304d95a","user":{"login":"giantswarm","id":7556340,"node_id":"MDEyOk9yZ2FuaXphdGlvbjc1NTYzNDA=","avatar_url":"https://avatars3.githubusercontent.com/u/7556340?v=4","gravatar_id":"","url":"https://api.github.com/users/giantswarm","html_url":"https://github.com/giantswarm","followers_url":"https://api.github.com/users/giantswarm/followers","following_url":"https://api.github.com/users/giantswarm/following{/other_user}","gists_url":"https://api.github.com/users/giantswarm/gists{/gist_id}","starred_url":"https://api.github.com/users/giantswarm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/giantswarm/subscriptions","organizations_url":"https://api.github.com/users/giantswarm/orgs","repos_url":"https://api.github.com/users/giantswarm/repos","events_url":"https://api.github.com/users/giantswarm/events{/privacy}","received_events_url":"https://api.github.com/users/giantswarm/received_events","type":"Organization","site_admin":false},"repo":{"id":30184278,"node_id":"MDEwOlJlcG9zaXRvcnkzMDE4NDI3OA==","name":"docs","full_name":"giantswarm/docs","owner":{"login":"giantswarm","id":7556340,"node_id":"MDEyOk9yZ2FuaXphdGlvbjc1NTYzNDA=","avatar_url":"https://avatars3.githubusercontent.com/u/7556340?v=4","gravatar_id":"","url":"https://api.github.com/users/giantswarm","html_url":"https://github.com/giantswarm","followers_url":"https://api.github.com/users/giantswarm/followers","following_url":"https://api.github.com/users/giantswarm/following{/other_user}","gists_url":"https://api.github.com/users/giantswarm/gists{/gist_id}","starred_url":"https://api.github.com/users/giantswarm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/giantswarm/subscriptions","organizations_url":"https://api.github.com/users/giantswarm/orgs","repos_url":"https://api.github.com/users/giantswarm/repos","events_url":"https://api.github.com/users/giantswarm/events{/privacy}","received_events_url":"https://api.github.com/users/giantswarm/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/giantswarm/docs","description":"A web application driving the Giant Swarm documentation site, using HUGO","fork":false,"url":"https://api.github.com/repos/giantswarm/docs","forks_url":"https://api.github.com/repos/giantswarm/docs/forks","keys_url":"https://api.github.com/repos/giantswarm/docs/keys{/key_id}","collaborators_url":"https://api.github.com/repos/giantswarm/docs/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/giantswarm/docs/teams","hooks_url":"https://api.github.com/repos/giantswarm/docs/hooks","issue_events_url":"https://api.github.com/repos/giantswarm/docs/issues/events{/number}","events_url":"https://api.github.com/repos/giantswarm/docs/events","assignees_url":"https://api.github.com/repos/giantswarm/docs/assignees{/user}","branches_url":"https://api.github.com/repos/giantswarm/docs/branches{/branch}","tags_url":"https://api.github.com/repos/giantswarm/docs/tags","blobs_url":"https://api.github.com/repos/giantswarm/docs/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/giantswarm/docs/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/giantswarm/docs/git/refs{/sha}","trees_url":"https://api.github.com/repos/giantswarm/docs/git/trees{/sha}","statuses_url":"https://api.github.com/repos/giantswarm/docs/statuses/{sha}","languages_url":"https://api.github.com/repos/giantswarm/docs/languages","stargazers_url":"https://api.github.com/repos/giantswarm/docs/stargazers","contributors_url":"https://api.github.com/repos/giantswarm/docs/contributors","subscribers_url":"https://api.github.com/repos/giantswarm/docs/subscribers","subscription_url":"https://api.github.com/repos/giantswarm/docs/subscription","commits_url":"https://api.github.com/repos/giantswarm/docs/commits{/sha}","git_commits_url":"https://api.github.com/repos/giantswarm/docs/git/commits{/sha}","comments_url":"https://api.github.com/repos/giantswarm/docs/comments{/number}","issue_comment_url":"https://api.github.com/repos/giantswarm/docs/issues/comments{/number}","contents_url":"https://api.github.com/repos/giantswarm/docs/contents/{+path}","compare_url":"https://api.github.com/repos/giantswarm/docs/compare/{base}...{head}","merges_url":"https://api.github.com/repos/giantswarm/docs/merges","archive_url":"https://api.github.com/repos/giantswarm/docs/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/giantswarm/docs/downloads","issues_url":"https://api.github.com/repos/giantswarm/docs/issues{/number}","pulls_url":"https://api.github.com/repos/giantswarm/docs/pulls{/number}","milestones_url":"https://api.github.com/repos/giantswarm/docs/milestones{/number}","notifications_url":"https://api.github.com/repos/giantswarm/docs/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/giantswarm/docs/labels{/name}","releases_url":"https://api.github.com/repos/giantswarm/docs/releases{/id}","deployments_url":"https://api.github.com/repos/giantswarm/docs/deployments","created_at":"2015-02-02T11:36:15Z","updated_at":"2018-08-02T10:09:20Z","pushed_at":"2018-08-03T09:31:52Z","git_url":"git://github.com/giantswarm/docs.git","ssh_url":"git@github.com:giantswarm/docs.git","clone_url":"https://github.com/giantswarm/docs.git","svn_url":"https://github.com/giantswarm/docs","homepage":"http://docs.giantswarm.io/","size":10743,"stargazers_count":0,"watchers_count":0,"language":"CSS","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":7,"license":null,"forks":0,"open_issues":7,"watchers":0,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/giantswarm/docs/pulls/242"},"html":{"href":"https://github.com/giantswarm/docs/pull/242"},"issue":{"href":"https://api.github.com/repos/giantswarm/docs/issues/242"},"comments":{"href":"https://api.github.com/repos/giantswarm/docs/issues/242/comments"},"review_comments":{"href":"https://api.github.com/repos/giantswarm/docs/pulls/242/comments"},"review_comment":{"href":"https://api.github.com/repos/giantswarm/docs/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/giantswarm/docs/pulls/242/commits"},"statuses":{"href":"https://api.github.com/repos/giantswarm/docs/statuses/67a22249a34097444c063a7cf928ccaffb9583e3"}},"author_association":"NONE"}}
{"actor":{"display_login":"TheoBrigitte"}}