No. All resources, including the cluster control plane nodes, run in your customer subscription. These types of resources are put in a read-only resource group.