User Story:

As a (user persona), I want to be able to:

• Specify a resource ID of a network security group for hosted cluster creation
• Be able to decouple my network security group that already exists from the "network resource group"

so that I can achieve

• bring my own network security group
• decouple my network security group from the vnet resource group

Acceptance Criteria:

Description of criteria:

• The azure cloud provider config is correctly plumbed with a network security resource group and network security name that can exist in a separate resource group than the virtual network

(optional) Out of Scope:

Detail about what is specifically not being delivered in the story

Engineering Details:

• Route tables, subnets, vnets, etc.

This requires/does not require a design proposal.
This requires/does not require a feature gate.