acs-engine+aad+monitoring+rbac

acs-engine.json

{
  "apiVersion": "vlabs",
  "properties": {
    "orchestratorProfile": {
      "orchestratorType": "Kubernetes",
      "orchestratorRelease": "1.9",
      "kubernetesConfig": {
        "enableRbac": true,
       "networkPolicy": "calico",
       "enableAggregatedAPIs": true
      }
    },
    "aadProfile": {
      "serverAppID": "2fd8a123-f8d0-4040-bc33-81d6744a123f",
      "clientAppID": "8d187c35-7ad5-4851-b558-dd01bb4bb453",
      "tenantID": "72f988bf-86f1-41af-91ab-2d7cd011db47"
    },
    "masterProfile": {
      "count": 1,
      "dnsPrefix": "acsevmss",
      "vmSize": "Standard_D2_v2"
    },
    "agentPoolProfiles": [
      {
        "name": "agentpool1",
        "count": 1,
        "vmSize": "Standard_D2_v2",
        "storageProfile" : "ManagedDisks",
        "availabilityProfile": "AvailabilitySet",
        "extensions": [
          { 
            "name": "prometheus-grafana-k8s"
          }
        ]
      }
    ],
    "linuxProfile": {
      "adminUsername": "azureuser",
      "ssh": {
        "publicKeys": [
          {
            "keyData": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIvPbgfHihWSEHM4Dzccx1c0vsYEFYiuUCCkQhvFNWJ8HPTMDg2sPuTvW5pfSY3MOauSDCa2y/wAKONdQG0zNNIUgN6XGKWHk9o2qEF3C540Jr2v3DIaXgZvLiwlS/OgcwBrL9BY7kyGCPyMJcCfpadm4tc044zs6WZlSN1vul59y9A2qPuAlKWnYLO4VV19yIS2BU9sNv8suyADPn6i0vq+Bh8KjFdlje4DrPSGBsVwEmeeXX9kuOVTmVEG+ZHqIqpwaCm3lde3sr4mR9pp/cOtte4IdFBCepvwimCgcyqsNevp8IIl+Ky3/QR2DS4EQEU+fhmM6B5LryD5YXaBj7 [email protected]"
          }
        ]
      }
    },
    "extensionProfiles": [
      { 
        "extensionParameters": "monitoring;;"
      }
    ],
    "servicePrincipalProfile": {
      "clientId": "0a2c890b-4c32-40e4-b4d1-8672630ed4cc",
      "keyvaultSecretRef": {
        "vaultID": "/subscriptions/12c7e9d6-967e-40c8-8b3e-4659a4ada3ef/resourceGroups/keyvaults/providers/Microsoft.KeyVault/vaults/aks",
        "secretName": "spp",
        "version": "22977c6a31f74a3d8dec95935a60c061"
      }
      }
    }
  
}