Please read through Bring Your Own Cloud (BYOC) to understand BYOC in more detail.

Deployment Options

Turnkey / default - creates a VPN and cluster for a fully managed install
BYO-VPN - requires the customer to provide a VPN

Create Service Principle

Installs are created and provisioned by offering a Service Principal, that streamkap can use to provision the sandbox. Contributor role can be used instead of Owner in a shared deployment. To create an Azure service principal locally:

$ az login
$ az account list (to get the subscription ID)
$ az ad sp create-for-rbac --name <name> --role Owner --scopes /subscriptions/<subscription-id>

Architecture Diagram