AZURE
Azure subscriptions, managed like every other cloud.
Service-principal accounts, resource-group inventory, virtual machines, blob storage, Terraform stacks, Flexible Server databases, DNS, monitoring, cost, Functions and container registries, and AKS clusters that turn into Kubernetes projects.
THE MANUAL WAY
Where Azure work gets difficult.
THE RESOURCE GROUP NOBODY CLAIMS
A resource group called test-rg-2 holds a database, two VMs and a public IP. The person who created it has moved teams, and the portal cannot tell you why it exists.
THE SECRET THAT EXPIRED ON A FRIDAY
A service principal’s client secret lapsed and three pipelines failed at once. Nobody knew which systems used it, because it had been pasted into each of them.
THE PORTAL FIX
A setting was changed in the portal at midnight to stop an incident. The Terraform that owns that resource was never updated, and the next apply quietly reverted it.
WHAT TALOS DOES
Every Azure task, tracked and audited.
Service-principal accounts
Credentials stored encrypted per account and validated on attach, rather than pasted into each tool that needs them.
Inventory by resource group
Every subscription swept and grouped the way Azure organises it, including resources Talos did not create.
VMs and blob storage
Start, stop, resize and inspect virtual machines; browse and manage blob containers. Each action is a job with an audit entry.
Stacks with drift
Terraform stacks plan and apply through the queue, and a re-plan of an applied stack reports drift instead of assuming there is none.
Flexible Server, DNS and Functions
PostgreSQL and MySQL Flexible Server, Azure DNS zones and records, and Function Apps deployed through Kudu.
Monitor and cost
Metrics and alert rules from Azure Monitor, and spend from Cost Management, beside the resources that incur it.
HOW IT RUNS
Every action is a tracked job.
WHAT MAKES THIS DIFFERENT
Azure resources connect to the rest of Talos.
A cloud manager that stops at the provider boundary leaves the integration work to you. Azure resources step into the rest of Talos: a VM becomes a managed server, a Flexible Server becomes a database connection with backups and restore verification, a container registry’s credentials become a Docker registry, and an AKS cluster becomes a Kubernetes project.
RELATED CAPABILITIES
Attach one subscription, read-only.
The first sweep changes nothing. It shows what is running and which resource groups nobody owns.