Azure Config

Once you’ve installed Kubecost in an azure account, to access accurate Microsoft Azure billing data, Kubecost needs access to the Billing Rate Card API.

Note: you can also get this functionality plus external costs by completing the full Kubecost Azure integration.

Start by creating an Azure role definition. Below is an example definition, replace YOURSUBSCRIPTIONID with the Subscription ID of your account:

{
    "Name": "MyRateCardRole",
    "IsCustom": true,
    "Description": "Rate Card query role",
    "Actions": [
        "Microsoft.Compute/virtualMachines/vmSizes/read",
        "Microsoft.Resources/subscriptions/locations/read",
        "Microsoft.Resources/providers/read",
        "Microsoft.ContainerService/containerServices/read",
        "Microsoft.Commerce/RateCard/read"
    ],
    "AssignableScopes": [
        "/subscriptions/YOUR_SUBSCRIPTION_ID"
    ]
}

Save this into a file called myrole.json

Next, you’ll want to register that role with Azure:

az role definition create --verbose --role-definition @myrole.json

Next, create an Azure Service Principal.

az ad sp create-for-rbac --name "MyServicePrincipal" --role "MyRateCardRole" --sdk-auth true > my_credentials.json

The newly created my_credentials.json file will contain the relevant configuration information. You can either supply this information in /settings.html (screenshot below) or in helm values under kubecostProductConfigs :

helm install kubecost ./cost-analyzer -n kubecost --set kubecostProductConfigs.azureSubscriptionID=<> --set kubecostProductConfigs.azureClientID=<> --set kubecostProductConfigs.azureTenantID=<> --set kubecostProductConfigs.azureClientPassword=<> --set .kubecostProductConfigs.createServiceKeySecret=true

Additionally kubecostProductConfigs.azureOfferDurableID can be modified to use the Offer Durable ID of your subscription, which can be found in the Azure Portal in subscriptions. The Default is “MS-AZR-0003p” which is a pay-as-you-go subscription.

Edit this doc on GitHub