diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..608d4bd
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,2 @@
+# Keys Directory
+keys
\ No newline at end of file
diff --git a/README.md b/README.md
index fc07bb9..5fda698 100644
--- a/README.md
+++ b/README.md
@@ -6,6 +6,8 @@ This tutorial is optimized for learning, which means taking the long route to he
 
 * [Google Compute Engine](https://cloud.google.com/compute)
 * [Amazon EC2](https://aws.amazon.com/ec2)
+* [Microsoft Azure](https://azure.microsoft.com)
+
 
 > The results of this tutorial should not be viewed as production ready, and may receive limited support from the community, but don't let that prevent you from learning!
 
@@ -47,16 +49,21 @@ AWS
 
 * The us-west-2 region will be used
 
+Azure
+
+* The "west us" region will be used
+
 ## Platforms
 
 This tutorial assumes you have access to one of the following:
 
 * [Google Cloud Platform](https://cloud.google.com) and the [Google Cloud SDK](https://cloud.google.com/sdk/) (125.0.0+)
 * [Amazon Web Services](https://aws.amazon.com), the [AWS CLI](https://aws.amazon.com/cli) (1.10.63+), and [jq](https://stedolan.github.io/jq) (1.5+)
+* [Microsoft Azure](https://azure.microsoft.com), the [Azure CLI](https://azure.microsoft.com/en-us/documentation/articles/xplat-cli-install/) (0.10.1+), and [jq](https://stedolan.github.io/jq) (1.5+)
 
 ## Labs
 
-While GCP or AWS will be used for basic infrastructure needs, the things learned in this tutorial apply to every platform.
+While GCP, AWS or Azure will be used for basic infrastructure needs, the things learned in this tutorial apply to every platform.
 
 * [Cloud Infrastructure Provisioning](docs/01-infrastructure.md)
 * [Setting up a CA and TLS Cert Generation](docs/02-certificate-authority.md)
diff --git a/docs/01-infrastructure-azure.md b/docs/01-infrastructure-azure.md
new file mode 100644
index 0000000..51aaf89
--- /dev/null
+++ b/docs/01-infrastructure-azure.md
@@ -0,0 +1,699 @@
+# Cloud Infrastructure Provisioning - Azure
+This lab will walk you through provisioning the compute instances required for running a H/A Kubernetes cluster. A total of 10 virtual machines will be created.
+
+The guide assumes you'll be creating resources in the `West Us` region as a single Azure Resource Manager resource group.
+
+
+> All machines will be provisioned with fixed private IP addresses to simplify the bootstrap process.
+
+The cluster VMs are only accessible via a jump box (a VM with publicly accessible ssh endpoint). The workers machines are exposed via external load balancer that carries both an public IP and public FQDN. 
+
+
+## Variables
+
+Change the following values as needed. 
+
+```
+# dns for jumpbox is <jumpboxDnsLabel>.westus.cloudapp.azure.com
+jumpboxDnsLabel="the-hard-way-jumpbox" 
+```
+
+```
+# dns for workers is <workersDnsLabel>.westus.cloudapp.azure.com
+workersDnsLabel="the-hard-way" 
+```
+
+```
+#storage account used by jumpbox + controllers + Etcd VMs
+controlPlaneStorageAccount="thehardwaycsa"
+```
+
+```
+#storage account used by workers VMs
+workersStorageAccount="thehardwaywsa"
+```
+
+```
+# all vms are using ubunut 16.4 LTS 
+imageUrn="Canonical:UbuntuServer:16.04.0-LTS:latest"
+```
+
+## Create Resource Group
+
+```
+azure group create \
+	--name the-hard-way \
+	--location "West Us"
+```
+
+## Networking
+
+### Create Routing Table
+
+```
+azure network route-table create \
+	--resource-group the-hard-way \
+	--name the-hard-way-rtable \
+	--location "West Us"
+```
+
+### Create Network Security Group (NSG)
+
+```
+azure network nsg create \
+	--resource-group the-hard-way \
+	--name the-hard-way-nsg \
+	--location "West Us"
+```
+
+
+Create NSG rule allowing SSH to the jumpbox
+
+```
+azure network nsg rule create \
+	--resource-group the-hard-way \
+	--nsg-name the-hard-way-nsg \
+	--name allow-ssh-jumpbox \
+	--protocol tcp \
+	--access allow  \
+	--destination-address-prefix 10.0.0.5 \
+	--destination-port-range 22 \
+	--priority 100 \
+	--direction inbound
+```
+
+
+### Create VNET + Subnet 
+
+Cluster VNET
+```
+azure network vnet create \
+	--resource-group the-hard-way \
+	--name the-hard-way-net \
+	--address-prefixes 10.0.0.0/8 \
+	--location "West Us"
+```
+
+Create subnets
+
+```
+# Azure UDR "user defined routes" in custom routing tables 
+# routes traffic leaving the subnet.
+# Workers & pods (IPs) have to be in two separate subnets
+
+azure network vnet subnet create \
+	--resource-group the-hard-way \
+	--vnet-name the-hard-way-net \
+	--name kubernetes-mgmt \
+	--address-prefix 10.0.0.0/16
+
+
+azure network vnet subnet create \
+	--resource-group the-hard-way \
+	--vnet-name the-hard-way-net \
+	--name kubernetes \
+	--address-prefix 10.224.0.0/11
+
+
+```
+
+Associate the routing table and NSG to Kubernetes/-mgmt subnets
+
+```
+azure network vnet subnet set \
+	--resource-group the-hard-way \
+	--vnet-name the-hard-way-net \
+	--name kubernetes-mgmt \
+	--network-security-group-name the-hard-way-nsg \
+	--route-table-name the-hard-way-rtable
+
+
+azure network vnet subnet set \
+	--resource-group the-hard-way \
+	--vnet-name the-hard-way-net \
+	--name kubernetes \
+	--network-security-group-name the-hard-way-nsg \
+	--route-table-name the-hard-way-rtable
+```
+
+
+Create public IP + DNS label for the jumpbox
+
+```
+azure network public-ip create \
+	--resource-group the-hard-way \
+	--name the-hard-way-jumpbox  \
+	--allocation-method Dynamic \
+	--domain-name-label $jumpboxDnsLabel \
+	--location "West Us"
+```
+
+## Virtual Machines
+
+Create SSH keys (Used by All VMs)
+
+```
+mkdir keys
+ssh-keygen -t rsa -f ./keys/cluster
+```
+
+### Storage Accounts 
+
+Create storage account for control plane VMs (Etcd & Controllers)
+
+```
+azure storage account create $controlPlaneStorageAccount \
+	--resource-group the-hard-way \
+	--kind storage \
+	--sku-name LRS \
+	--location "West Us"
+```
+
+Create storage account for workers VMs
+
+```
+azure storage account create $workersStorageAccount \
+	--resource-group the-hard-way \
+	--kind storage \
+	--sku-name LRS \
+	--location "West Us"
+```
+
+
+
+### Jump Box
+
+#### Create NIC (Private IP + Public IP + FQDN)
+
+```
+azure network nic create \
+	--resource-group the-hard-way \
+	--name jumpbox-nic \
+	--private-ip-address "10.0.0.5" \
+	--subnet-vnet-name the-hard-way-net  \
+	--subnet-name kubernetes-mgmt  \
+	--public-ip-name the-hard-way-jumpbox \
+	--location "West Us"
+```
+
+#### Create VM
+
+```
+azure vm create \
+	--resource-group the-hard-way \
+	--name jumpbox \
+	--vm-size Standard_A1 \
+	--nic-name jumpbox-nic \
+	--vnet-name the-hard-way-net  \
+	--vnet-subnet-name kubernetes-mgmt  \
+	--os-type linux \
+	--image-urn $imageUrn \
+	--storage-account-name $controlPlaneStorageAccount \
+	--storage-account-container-name vhds \
+	--os-disk-vhd jumpbox.vhd \
+	--admin-username thehardway \
+	--ssh-publickey-file ./keys/cluster.pub \
+	--location "West US"
+``` 
+
+### Etcd 
+
+#### Etcd 0
+
+Create Nic
+```
+azure network nic create \
+	--resource-group the-hard-way \
+	--name etcd-0-nic \
+	--private-ip-address "10.240.0.10" \
+	--subnet-vnet-name the-hard-way-net  \
+	--subnet-name kubernetes  \
+	--location "West Us"
+```
+Create VM
+
+```
+azure vm create \
+	--resource-group the-hard-way \
+	--name etcd0 \
+	--vm-size Standard_A1 \
+	--nic-name etcd-0-nic \
+	--vnet-name the-hard-way-net  \
+	--vnet-subnet-name kubernetes  \
+	--os-type linux \
+	--image-urn $imageUrn \
+	--storage-account-name $controlPlaneStorageAccount \
+	--storage-account-container-name vhds \
+	--os-disk-vhd etcd-0.vhd \
+	--admin-username thehardway \
+	--ssh-publickey-file ./keys/cluster.pub \
+	--location "West US"
+```
+
+#### Etcd 1
+
+Create Nic
+
+```
+azure network nic create \
+	--resource-group the-hard-way \
+	--name etcd-1-nic \
+	--private-ip-address "10.240.0.11" \
+	--subnet-vnet-name the-hard-way-net  \
+	--subnet-name kubernetes  \
+	--location "West Us"
+```
+
+Create VM
+
+```
+azure vm create \
+	--resource-group the-hard-way \
+	--name etcd1 \
+	--vm-size Standard_A1 \
+	--nic-name etcd-1-nic \
+	--vnet-name the-hard-way-net  \
+	--vnet-subnet-name kubernetes  \
+	--os-type linux \
+	--image-urn $imageUrn \
+	--storage-account-name $controlPlaneStorageAccount \
+	--storage-account-container-name vhds \
+	--os-disk-vhd etcd-1.vhd \
+	--admin-username thehardway \
+	--ssh-publickey-file ./keys/cluster.pub \
+	--location "West US"
+```
+
+#### Etcd 2
+
+Create Nic
+
+```
+azure network nic create \
+	--resource-group the-hard-way \
+	--name etcd-2-nic \
+	--private-ip-address "10.240.0.12" \
+	--subnet-vnet-name the-hard-way-net  \
+	--subnet-name kubernetes  \
+	--location "West Us"
+```
+
+Create VM
+
+```
+azure vm create \
+	--resource-group the-hard-way \
+	--name etcd2 \
+	--vm-size Standard_A1 \
+	--nic-name etcd-2-nic \
+	--vnet-name the-hard-way-net  \
+	--vnet-subnet-name kubernetes  \
+	--os-type linux \
+	--image-urn $imageUrn \
+	--storage-account-name $controlPlaneStorageAccount \
+	--storage-account-container-name vhds \
+	--os-disk-vhd etcd-2.vhd \
+	--admin-username thehardway \
+	--ssh-publickey-file ./keys/cluster.pub \
+	--location "West US"
+```
+
+
+### Kubernetes Controllers
+
+
+#### Controllers Internal Load Balancer 
+
+Create load balancer 
+
+```
+azure network lb create \
+	--resource-group the-hard-way \
+	--name the-hard-way-clb \
+	--location "West Us"
+```
+
+Create & assign the front-end private IP to the internal load balancer
+
+```
+azure network lb frontend-ip create \
+	--resource-group the-hard-way \
+	--name the-hard-way-cfe  \
+	--lb-name the-hard-way-clb \
+	--private-ip-address "10.240.0.4" \
+	--subnet-vnet-name the-hard-way-net \
+	--subnet-name kubernetes
+```
+
+Create a backend address pool for the load balancer
+
+```
+clbbackendPoolId=$(azure network lb address-pool create \
+	--resource-group the-hard-way \
+	--lb-name the-hard-way-clb \
+	--name backend-pool \
+	--json | jq -r '.id')
+```
+
+#### Create controllers availability set
+
+```
+azure availset create \
+	--resource-group the-hard-way \
+	--name controllers-availset \
+	--location "West Us"
+```
+
+
+#### Controller 0 
+
+Create Nic
+
+```
+azure network nic create \
+	--resource-group the-hard-way \
+	--name controller-0-nic \
+	--private-ip-address "10.240.0.20" \
+	--subnet-vnet-name the-hard-way-net  \
+	--subnet-name kubernetes  \
+	--lb-address-pool-ids $clbbackendPoolId \
+	--location "West Us"
+```
+
+Create VM
+
+```
+azure vm create \
+	--resource-group the-hard-way \
+    --name controller0 \
+    --vm-size Standard_A1 \
+    --nic-name controller-0-nic \
+	--vnet-name the-hard-way-net  \
+	--vnet-subnet-name kubernetes  \
+	--availset-name controllers-availset \
+    --os-type linux \
+    --image-urn $imageUrn \
+    --storage-account-name $controlPlaneStorageAccount \
+    --storage-account-container-name vhds \
+    --os-disk-vhd controller-0.vhd \
+    --admin-username thehardway \
+    --ssh-publickey-file ./keys/cluster.pub \
+	--location "West US"
+```
+
+#### Controller 1 
+
+Create Nic
+
+```
+azure network nic create \
+	--resource-group the-hard-way \
+	--name controller-1-nic \
+	--private-ip-address "10.240.0.21" \
+	--subnet-vnet-name the-hard-way-net  \
+	--subnet-name kubernetes  \
+	--lb-address-pool-ids $clbbackendPoolId \
+	--location "West Us"
+```
+
+Create VM
+
+```
+azure vm create \
+	--resource-group the-hard-way \
+    --name controller1 \
+    --vm-size Standard_A1 \
+    --nic-name controller-1-nic \
+	--vnet-name the-hard-way-net  \
+	--vnet-subnet-name kubernetes  \
+	--availset-name controllers-availset \
+    --os-type linux \
+    --image-urn $imageUrn \
+    --storage-account-name $controlPlaneStorageAccount \
+    --storage-account-container-name vhds \
+    --os-disk-vhd controller-1.vhd \
+    --admin-username thehardway \
+    --ssh-publickey-file ./keys/cluster.pub \
+	--location "West US"
+```
+
+#### Controller 2
+
+Create Nic
+
+```
+azure network nic create \
+	--resource-group the-hard-way \
+	--name controller-2-nic \
+	--private-ip-address "10.240.0.22" \
+	--subnet-vnet-name the-hard-way-net  \
+	--subnet-name kubernetes  \
+	--lb-address-pool-ids $clbbackendPoolId \
+	--location "West Us"
+```
+
+Create VM
+
+```
+azure vm create \
+	--resource-group the-hard-way \
+    --name controller2 \
+    --vm-size Standard_A1 \
+    --nic-names controller-2-nic \
+	--vnet-name the-hard-way-net  \
+	--vnet-subnet-name kubernetes  \
+	--availset-name controllers-availset \
+    --os-type linux \
+    --image-urn $imageUrn \
+    --storage-account-name $controlPlaneStorageAccount \
+    --storage-account-container-name vhds \
+    --os-disk-vhd controller-2.vhd \
+    --admin-username thehardway \
+    --ssh-publickey-file ./keys/cluster.pub \
+	--location "West US"
+```
+
+
+### Kubernetes Workers
+
+#### Workers External Load Balancer 
+
+Create public IP + DNS label for workers ingestion external load balancer
+
+```
+azure network public-ip create \
+	--resource-group the-hard-way \
+	--name the-hard-way-workers  \
+	--allocation-method Dynamic \
+	--domain-name-label $workersDnsLabel \
+	--location "West Us"
+```
+
+Create load balancer 
+
+```
+azure network lb create \
+	--resource-group the-hard-way \
+	--name the-hard-way-lb \
+	--location "West Us"
+```
+
+Assign the front-end public IP + FQDN to the load balancer
+
+```
+azure network lb frontend-ip create \
+	--resource-group the-hard-way \
+	--name the-hard-way-fe  \
+	--lb-name the-hard-way-lb \
+	--public-ip-name the-hard-way-workers
+```
+
+Create a backend address pool for the load balancer
+
+```
+wlbbackendPoolId=$(azure network lb address-pool create \
+	--resource-group the-hard-way \
+	--lb-name the-hard-way-lb \
+	--name backend-pool \
+	--json | jq -r '.id')
+```
+
+#### Create Workers Availablity set
+
+```
+azure availset create \
+	--resource-group the-hard-way \
+	--name workers-availset \
+	--location "West Us"
+```
+
+#### Worker 0
+
+Create Nic
+
+```
+azure network nic create \
+	--resource-group the-hard-way \
+	--name worker-0-nic \
+	--private-ip-address "10.240.0.30" \
+	--subnet-vnet-name the-hard-way-net  \
+	--subnet-name kubernetes  \
+	--enable-ip-forwarding "true" \
+	--lb-address-pool-ids $wlbbackendPoolId \
+	--location "West Us"
+```
+
+Create VM
+
+```
+azure vm create \
+	--resource-group the-hard-way \
+    --name worker0 \
+    --vm-size Standard_D4 \
+    --nic-name worker-0-nic \
+	--vnet-name the-hard-way-net  \
+	--vnet-subnet-name kubernetes  \
+    --availset-name workers-availset \
+	--os-type linux \
+    --image-urn $imageUrn \
+    --storage-account-name $workersStorageAccount \
+    --storage-account-container-name vhds \
+    --os-disk-vhd worker-0.vhd \
+    --admin-username thehardway \
+    --ssh-publickey-file ./keys/cluster.pub \
+	--location "West US"
+```
+
+#### Worker 1
+
+Create Nic
+
+```
+azure network nic create \
+	--resource-group the-hard-way \
+	--name worker-1-nic \
+	--private-ip-address "10.240.0.31" \
+	--subnet-vnet-name the-hard-way-net  \
+	--subnet-name kubernetes  \
+	--enable-ip-forwarding "true" \
+	--lb-address-pool-ids $wlbbackendPoolId \
+	--location "West Us"
+```
+
+Create VM
+
+```
+azure vm create \
+	--resource-group the-hard-way \
+    --name worker1 \
+    --vm-size Standard_D4 \
+    --nic-name worker-1-nic \
+	--vnet-name the-hard-way-net  \
+	--vnet-subnet-name kubernetes  \
+    --availset-name workers-availset \
+	--os-type linux \
+    --image-urn $imageUrn \
+    --storage-account-name $workersStorageAccount \
+    --storage-account-container-name vhds \
+    --os-disk-vhd worker-1.vhd \
+    --admin-username thehardway \
+    --ssh-publickey-file ./keys/cluster.pub \
+	--location "West US"
+```
+
+#### Worker 2
+
+Create Nic
+
+```
+azure network nic create \
+	--resource-group the-hard-way \
+	--name worker-2-nic \
+	--private-ip-address "10.240.0.32" \
+	--subnet-vnet-name the-hard-way-net  \
+	--subnet-name kubernetes  \
+	--enable-ip-forwarding "true" \
+	--lb-address-pool-ids $wlbbackendPoolId \
+	--location "West Us"
+```
+
+Create VM
+
+```
+azure vm create \
+	--resource-group the-hard-way \
+    --name worker2 \
+    --vm-size Standard_D4 \
+    --nic-name worker-2-nic \
+	--vnet-name the-hard-way-net  \
+	--vnet-subnet-name kubernetes  \
+    --availset-name workers-availset \
+	--os-type linux \
+    --image-urn $imageUrn \
+    --storage-account-name $workersStorageAccount \
+    --storage-account-container-name vhds \
+    --os-disk-vhd worker-2.vhd \
+    --admin-username thehardway \
+    --ssh-publickey-file ./keys/cluster.pub \
+	--location "West US"
+```
+
+## Verify 
+
+```
+azure vm list --resource-group the-hard-way
+```
+
+Expected Output 
+```
+info:    Executing command vm list
++ Getting virtual machines                                                     
+data:    ResourceGroupName  Name          ProvisioningState  PowerState  Location  Size       
+data:    -----------------  ------------  -----------------  ----------  --------  -----------
+data:    the-hard-way       controller-0  Succeeded          VM running  westus    Standard_D4
+data:    the-hard-way       controller-1  Succeeded          VM running  westus    Standard_D4
+data:    the-hard-way       controller-2  Succeeded          VM running  westus    Standard_D4
+data:    the-hard-way       etcd-0        Succeeded          VM running  westus    Standard_D4
+data:    the-hard-way       etcd-1        Succeeded          VM running  westus    Standard_D4
+data:    the-hard-way       etcd-2        Succeeded          VM running  westus    Standard_D4
+data:    the-hard-way       jumpbox       Succeeded          VM running  westus    Standard_A1
+data:    the-hard-way       worker-0      Succeeded          VM running  westus    Standard_D4
+data:    the-hard-way       worker-1      Succeeded          VM running  westus    Standard_D4
+data:    the-hard-way       worker-2      Succeeded          VM running  westus    Standard_D4
+info:    vm list command OK
+```
+
+
+## Using The Jumpbox
+
+> The Jumpbox does not have Azure CLI installed. All further Azure CLI commands should be executed on a machine with CLI installed & configured.   
+
+### Connect to Jumpbox 
+
+```
+ssh -i ./keys/cluster \
+	thehardway@$jumpboxDnsLabel.westus.cloudapp.azure.com
+```
+
+### Copy the cluster private key to jumpbox 
+
+```
+scp -i ./keys/cluster \
+	./keys/cluster \
+	thehardway@$jumpboxDnsLabel.westus.cloudapp.azure.com:~/cluster
+```
+
+### Connecting to Other VMs
+
+```
+#from the jumpbox 
+#connect to the second controller
+
+ssh -i ./cluster \
+	thehardway@10.240.0.31  
+
+#or
+ssh -i ./cluster \
+	thehardway@controller-1  
+
+```
diff --git a/docs/01-infrastructure.md b/docs/01-infrastructure.md
index bd4ae69..ef465cd 100644
--- a/docs/01-infrastructure.md
+++ b/docs/01-infrastructure.md
@@ -1,8 +1,10 @@
 # Cloud Infrastructure Provisioning
 
-Kubernetes can be installed just about anywhere physical or virtual machines can be run. In this lab we are going to focus on [Google Cloud Platform](https://cloud.google.com/) and [Amazon Web Services](https://aws.amazon.com).
+Kubernetes can be installed just about anywhere physical or virtual machines can be run. In this lab we are going to focus on [Google Cloud Platform](https://cloud.google.com/), [Amazon Web Services](https://aws.amazon.com) and [Microsoft Azure](https://azure.microsoft.com).
 
 This lab will walk you through provisioning the compute instances required for running a H/A Kubernetes cluster. 
 
 * [Cloud Infrastructure Provisioning - Google Cloud Platform](01-infrastructure-gcp.md)
 * [Cloud Infrastructure Provisioning - Amazon Web Services](01-infrastructure-aws.md)
+* [Cloud Infrastructure Provisioning - Microsoft Azure](01-infrastructure-azure.md)
+
diff --git a/docs/02-certificate-authority.md b/docs/02-certificate-authority.md
index c33e51a..fa07176 100644
--- a/docs/02-certificate-authority.md
+++ b/docs/02-certificate-authority.md
@@ -137,6 +137,18 @@ KUBERNETES_PUBLIC_ADDRESS=$(aws elb describe-load-balancers \
   jq -r '.LoadBalancerDescriptions[].DNSName')
 ```
 
+#### Azure
+
+this gets the address of the internal controllers load balancer
+
+```
+KUBERNETES_PUBLIC_ADDRESS=$(azure network lb show \
+  --resource-group the-hard-way \
+  --name the-hard-way-clb \
+  --json | \
+  jq -r '.frontendIPConfigurations[0].privateIPAddress')
+```
+
 ---
 
 Create the `kubernetes-csr.json` file:
@@ -239,3 +251,46 @@ for host in ${KUBERNETES_HOSTS[*]}; do
     ubuntu@${PUBLIC_IP_ADDRESS}:~/
 done
 ```
+
+### Azure
+
+If you are using the jumpbox to create the certificates
+
+```
+for host in ${KUBERNETES_HOSTS[*]}; do
+  scp -i ./cluster ca.pem kubernetes-key.pem kubernetes.pem \
+    thehardway@${host}:~/
+done
+```
+
+If you used a different machine
+
+```
+
+# Get jumpbox address
+
+KUBERNETES_JUMPBOX_ADDRESS=$(azure network public-ip show \
+  --resource-group the-hard-way \
+  --name the-hard-way-jumpbox \
+  --json | jq -r '.dnsSettings.fqdn')
+
+# Copy files to jumpbox 
+
+scp -i ./keys/cluster \
+  ca.pem \
+  kubernetes-key.pem \
+  kubernetes.pem \
+  thehardway@$KUBERNETES_JUMPBOX_ADDRESS:~/
+
+# Copy files from jumpbox to vms
+ssh -i ./keys/cluster \
+  thehardway@$KUBERNETES_JUMPBOX_ADDRESS <<'EOF'
+  
+  KUBERNETES_HOSTS=(controller0 controller1 controller2 etcd0 etcd1 etcd2 worker0 worker1 worker2)
+  for host in ${KUBERNETES_HOSTS[*]}; do
+  scp -i ./cluster ca.pem kubernetes-key.pem kubernetes.pem \
+    thehardway@${host}:~/
+  done
+  
+EOF
+```
\ No newline at end of file
diff --git a/docs/03-etcd.md b/docs/03-etcd.md
index f64271a..8226d0b 100644
--- a/docs/03-etcd.md
+++ b/docs/03-etcd.md
@@ -107,6 +107,12 @@ INTERNAL_IP=$(curl -s -H "Metadata-Flavor: Google" \
 INTERNAL_IP=$(curl -s http://169.254.169.254/latest/meta-data/local-ipv4)
 ```
 
+#### Azure
+
+```
+INTERNAL_IP=$(ifconfig eth0 | grep 'inet ' | cut -d: -f2 | awk '{print $1}')
+```
+
 ---
 
 Each etcd member must have a unique name within an etcd cluster. Set the etcd name:
diff --git a/docs/04-kubernetes-controller.md b/docs/04-kubernetes-controller.md
index 46e31d6..0a6d007 100644
--- a/docs/04-kubernetes-controller.md
+++ b/docs/04-kubernetes-controller.md
@@ -138,6 +138,12 @@ INTERNAL_IP=$(curl -s -H "Metadata-Flavor: Google" \
 INTERNAL_IP=$(curl -s http://169.254.169.254/latest/meta-data/local-ipv4)
 ```
 
+#### Azure
+
+```
+INTERNAL_IP=$(ifconfig eth0 | grep 'inet ' | cut -d: -f2 | awk '{print $1}')
+```
+
 ---
 
 Create the systemd unit file:
@@ -340,3 +346,27 @@ aws elb register-instances-with-load-balancer \
   --load-balancer-name kubernetes \
   --instances ${CONTROLLER_0_INSTANCE_ID} ${CONTROLLER_1_INSTANCE_ID} ${CONTROLLER_2_INSTANCE_ID}
 ```
+
+
+### Azure
+
+```
+azure network lb probe create \
+  --resource-group the-hard-way \
+  --lb-name the-hard-way-clb \
+  --name controller-api-server-health \
+  --interval 5 \
+  --port 8080 \
+  --protocol http \
+  --path '/healthz'
+
+azure network lb rule create \
+  --resource-group the-hard-way \
+  --lb-name the-hard-way-clb \
+  --name controller-api-server \
+  --frontend-port 6443 \
+  --backend-port 6443 \
+  --frontend-ip-name the-hard-way-cfe \
+  --backend-address-pool-name backend-pool \
+  --probe-name controller-api-server-health
+```
\ No newline at end of file
diff --git a/docs/06-kubectl.md b/docs/06-kubectl.md
index c75b17b..7e6255a 100644
--- a/docs/06-kubectl.md
+++ b/docs/06-kubectl.md
@@ -36,6 +36,20 @@ KUBERNETES_PUBLIC_ADDRESS=$(aws elb describe-load-balancers \
   --load-balancer-name kubernetes | \
   jq -r '.LoadBalancerDescriptions[].DNSName')
 ```
+
+### Azure 
+
+```
+# we are configuring kubectl on jumpbox
+# The controllers are exposed via internal load balancer
+# access is only allowed within the VNET 
+# (outside the vnet ssh -L ... port 6443 .. from jumpbox to internal lb) 
+KUBERNETES_PUBLIC_ADDRESS=$(azure network lb show \
+  --resource-group the-hard-way \
+  --name the-hard-way-clb \
+  --json | \
+  jq -r '.frontendIPConfigurations[0].privateIPAddress')
+```
 ---
 
 Recall the token we setup for the admin user:
diff --git a/docs/07-network.md b/docs/07-network.md
index 5b99809..96a7501 100644
--- a/docs/07-network.md
+++ b/docs/07-network.md
@@ -118,3 +118,31 @@ aws ec2 create-route \
   --destination-cidr-block 10.200.2.0/24 \
   --instance-id ${WORKER_2_INSTANCE_ID}
 ```
+
+### Azure
+
+```
+azure network route-table route create \
+  --resource-group the-hard-way \
+  --name worker0-route \
+  --route-table-name the-hard-way-rtable \
+  --address-prefix 10.200.0.0/24 \
+  --next-hop-ip-address 10.240.0.30 \
+  --next-hop-type VirtualAppliance
+
+azure network route-table route create \
+  --resource-group the-hard-way \
+  --name worker1-route \
+  --route-table-name the-hard-way-rtable \
+  --address-prefix 10.200.1.0/24 \
+  --next-hop-ip-address 10.240.0.31 \
+  --next-hop-type VirtualAppliance
+
+azure network route-table route create \
+  --resource-group the-hard-way \
+  --name worker2-route \
+  --route-table-name the-hard-way-rtable \
+  --address-prefix 10.200.2.0/24 \
+  --next-hop-ip-address 10.240.0.32 \
+  --next-hop-type VirtualAppliance  
+```
\ No newline at end of file
diff --git a/docs/09-smoke-test.md b/docs/09-smoke-test.md
index a812108..3f486c4 100644
--- a/docs/09-smoke-test.md
+++ b/docs/09-smoke-test.md
@@ -79,6 +79,52 @@ NODE_PUBLIC_IP=$(aws ec2 describe-instances \
   jq -j '.Reservations[].Instances[].PublicIpAddress')
 ```
 
+#### Azure
+
+```
+# Get the fqdn for the public worker ingestion load balancer
+
+NODE_PUBLIC_IP=$(azure network public-ip show \
+  --resource-group the-hard-way \
+  --name the-hard-way-workers \
+  --json | jq -r '.dnsSettings.fqdn')
+
+# Add NSG rule to enable traffic to workers' node ports
+
+azure network nsg rule create \
+	--resource-group the-hard-way \
+	--nsg-name the-hard-way-nsg \
+	--name allow-internet-$NODE_PORT \
+	--protocol tcp \
+	--access allow  \
+  --source-address-prefix Internet \
+	--destination-address-prefix 10.240.0.0/16 \
+	--destination-port-range $NODE_PORT \
+	--priority 110 \
+	--direction inbound
+
+# Create load balancer rule NODE_PORT:NODE_PORT on the load balancer
+
+azure network lb probe create \
+  --resource-group the-hard-way \
+  --lb-name the-hard-way-lb \
+  --name nginx-app-health \
+  --interval 5 \
+  --port $NODE_PORT \
+  --protocol tcp
+  
+
+azure network lb rule create \
+  --resource-group the-hard-way \
+  --lb-name the-hard-way-lb \
+  --name nginx-app  \
+  --frontend-port $NODE_PORT \
+  --backend-port $NODE_PORT \
+  --frontend-ip-name the-hard-way-fe \
+  --backend-address-pool-name backend-pool \
+  --probe-name nginx-app-health
+```
+
 ---
 
 Test the nginx service using cURL:
diff --git a/docs/10-cleanup.md b/docs/10-cleanup.md
index 452b58a..7dedbcc 100644
--- a/docs/10-cleanup.md
+++ b/docs/10-cleanup.md
@@ -205,3 +205,11 @@ DHCP_OPTION_SET_ID=$(aws ec2 describe-dhcp-options \
 aws ec2 delete-dhcp-options \
   --dhcp-options-id ${DHCP_OPTION_SET_ID}
 ```
+
+## Azure 
+
+The following deletes all resources created.
+
+```
+azure group delete the-hard-way
+```
\ No newline at end of file