Skip to content

Commit

Permalink
Merge pull request #497 from MicrosoftDocs/main
Browse files Browse the repository at this point in the history
1/22/2025 PM Publish
  • Loading branch information
Taojunshen authored Jan 22, 2025
2 parents f8a5ea7 + c740566 commit d87ede0
Show file tree
Hide file tree
Showing 115 changed files with 274 additions and 235 deletions.
61 changes: 52 additions & 9 deletions articles/azure-arc/resource-bridge/maintenance.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,31 +2,31 @@
title: Azure Arc resource bridge maintenance operations
description: Learn how to manage Azure Arc resource bridge so that it remains online and operational.
ms.topic: conceptual
ms.date: 09/20/2024
ms.date: 1/21/2025
---

# Azure Arc resource bridge maintenance operations

To keep your Azure Arc resource bridge deployment online and operational, you need to perform maintenance operations such as updating credentials, monitoring upgrades, and ensuring the appliance VM is online.
To keep your Azure Arc resource bridge deployment online and operational, you need to perform maintenance operations such as updating credentials, monitoring upgrades, and ensuring the appliance VM is online.

> [!IMPORTANT]
> Arc resource bridge can't be offline for longer than 90 days. After 90 days, the security key within the appliance expires and can't be recovered. As a best practice, you should create a resource health alert in Azure Portal for Arc resource bridge. The Resource type for Arc resource bridge is listed as `Microsoft.ResourceConnector/appliances` in Resource Health.
> Arc resource bridge can't be offline for longer than 90 days. After 90 days, the security key within the appliance expires and can't be recovered. As a best practice, [create a resource health alert](#create-resource-health-alerts) in the Azure portal so that you're notified if an Arc resource bridge becomes unavailable.
## Prerequisites

To maintain the on-premises appliance VM, the [appliance configuration files generated during deployment](deploy-cli.md#az-arcappliance-createconfig) need to be saved in a secure location and made available on the management machine.

The management machine used to perform maintenance operations must meet all of [the Arc resource bridge requirements](system-requirements.md).

The following sections describe the maintenance tasks for Arc resource bridge.
The following sections describe common maintenance tasks for Arc resource bridge.

## Update credentials in the appliance VM

Arc resource bridge consists of an on-premises appliance VM. The appliance VM [stores credentials](system-requirements.md#user-account-and-credentials) (for example, a user account for VMware vCenter) that are used to access the control plane of the on-premises infrastructure to view and manage on-premises resources. The credentials used by Arc resource bridge are the same ones provided during deployment of the resource bridge. This allows the resource bridge visibility to on-premises resources for guest management in Azure.
Arc resource bridge consists of an on-premises appliance VM. The appliance VM [stores credentials](system-requirements.md#user-account-and-credentials) (for example, a user account for VMware vCenter) that are used to access the control plane of the on-premises infrastructure to view and manage on-premises resources. The credentials used by Arc resource bridge are the same ones provided during deployment of the resource bridge, which gives the resource bridge visibility to on-premises resources for guest management in Azure.

If the credentials change, the credentials stored in the Arc resource bridge must be updated with the [`update-infracredentials` command](/cli/azure/arcappliance/update-infracredentials). This command must be run from a management machine, and it requires a [kubeconfig file](system-requirements.md#kubeconfig).
If the credentials change, the credentials stored in the Arc resource bridge must be updated with the [`update-infracredentials` command](/cli/azure/arcappliance/update-infracredentials). This command must be run from a management machine, and it requires a [kubeconfig file](system-requirements.md#kubeconfig).

You can test if the credentials within the appliance VM are valid by going to Azure Portal and performing an action on an Arc-enabled Private Cloud VM. If you receive an error, then it is possible that the credentials need to be updated.
You can test if the credentials within the appliance VM are valid by going to the Azure portal and performing an action on an Arc-enabled Private Cloud VM. If you receive an error, then it is possible that the credentials need to be updated.

For more information on maintaining credentials for Arc-enabled VMware, see [Update the vSphere account credentials](../vmware-vsphere/administer-arc-vmware.md#updating-the-vsphere-account-credentials-using-a-new-password-or-a-new-vsphere-account-after-onboarding). For Arc-enabled SCVMM, see [Update the SCVMM account credentials](../system-center-virtual-machine-manager/administer-arc-scvmm.md).

Expand All @@ -36,14 +36,57 @@ If you experience problems with the appliance VM, the appliance configuration fi

You might want to [collect logs](/cli/azure/arcappliance/logs#az-arcappliance-logs-vmware), which requires you to pass credentials to the on-premises control center:

- For VMWare vSphere, use the username and password provided to Arc resource bridge at deployment.
- For VMware vSphere, use the username and password provided to Arc resource bridge at deployment.
- For Azure Local, see [Collect logs](/azure/azure-local/manage/collect-logs).

## Delete Arc resource bridge

You might need to delete Arc resource bridge due to deployment failures, or when the resource bridge is no longer needed. To do so, you need the appliance configuration files.

The [delete command](deploy-cli.md#az-arcappliance-delete) is the recommended way to delete the Arc resource bridge. This command deletes the on-premises appliance VM, along with the Azure resource and underlying components across the two environments.
Use the [`az arcappliance delete` command](deploy-cli.md#az-arcappliance-delete) to delete the Arc resource bridge. This command deletes the on-premises appliance VM, along with the Azure resource and underlying components across the two environments.

## Create resource health alerts

You can [create a resource health alert rule](/azure/service-health/resource-health-alert-monitor-guide) in the Azure portal to monitor the state of your Arc resource bridge. Follow these steps to create an alert that notifies you if an Arc resource bridge becomes unavailable.

1. In the Azure portal, navigate to **Service Health**.
1. In the service menu, under **RESOURCE HEALTH**, select **Resource health**.
1. Select **Add resource health alert**.

:::image type="content" source="media/maintenance/add-resource-health-alert.png" alt-text="Screenshot of the Resource health section within Service Health in the Azure portal.":::

1. Select the **Scope** tab and complete the following:

1. Select the subscription and resource group(s) that contains your Arc resource bridge resources.
1. For resource type, select `Microsoft.ResourceConnector/appliances`.
1. For resource, select the resource bridge resources that you want to include. To include new resource bridges in your selected scope, check **Include all future resources**.

1. Select **Next: Condition** to continue. In the **Condition** tab, set the following conditions:

- **Event status**: **Active**
- **Current resource status**: **Unavailable**
- **Previous resource status**: **Available**

1. Select one or more **Reason type** values for your alert:

- **Platform Initiated** : Alerts you when a resource becomes unavailable due to platform issues.
- **Unknown**: Alerts you when a resource becomes unavailable, but the reason isn't known.
- **User Initiated**: Alerts you when a resource becomes unavailable due to an action taken by a user.

1. Select **Next: Actions** to continue. In the **Actions** tab, if you want to receive an email when the alert is triggered, select **Use quick actions (preview)** and complete the following:

1. Enter an **Action group name** and **Display name**
1. Check the **Email** box and enter an email address.
1. Select **Save.**

1. Select **Next: Details** to continue. In the **Details** tab:

1. Select the resource group and region in which to create the alert rule.
1. Enter a name for your alert rule, and a description if desired.

1. Select **Review + create**, then select **Create**.

For more information about resource health alert rule options, see [Create or edit an activity log, service health, or resource health alert rule](/azure/azure-monitor/alerts/alerts-create-activity-log-alert-rule?tabs=resource-health).

## Next steps

Expand Down
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
10 changes: 4 additions & 6 deletions articles/azure-arc/servers/manage-vm-extensions-powershell.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: Enable VM Extensions Using Azure PowerShell
description: This article describes how to deploy virtual machine extensions to Azure Arc-enabled servers running in hybrid cloud environments by using Azure PowerShell.
ms.date: 12/06/2024
ms.date: 01/22/2025
ms.topic: how-to
ms.custom: devx-track-azurepowershell
---
Expand All @@ -23,11 +23,9 @@ This article explains how to deploy, update, and uninstall Azure virtual machine

Run the following command on your Azure Arc-enabled server:

`Install-Module -Name Az.ConnectedMachine`.

When the installation finishes, it returns the following message:

`The installed extension 'Az.ConnectedMachine' is experimental and not covered by customer support. Please use with discretion.`
```powershell
Install-Module -Name Az.ConnectedMachine
```

## Enable an extension

Expand Down
2 changes: 1 addition & 1 deletion articles/azure-arc/servers/toc.yml
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,7 @@
href: network-requirements.md
- name: Simplify network configuration requirements
href: arc-gateway.md
- name: access Azure services over Azure Firewall
- name: Access Azure services over Azure Firewall
href: arc-explicit-proxy.md
- name: Private Link networking
href: private-link-security.md
Expand Down
18 changes: 8 additions & 10 deletions articles/azure-portal/azure-portal-quickstart-center.md
Original file line number Diff line number Diff line change
@@ -1,35 +1,33 @@
---
title: Get started with the Azure Quickstart Center
description: Use the Azure Quickstart Center guided experience to get started with Azure. Learn to set up, migrate, and innovate.
ms.date: 11/15/2023
ms.date: 01/22/2025
ms.topic: conceptual
---

# Get started with the Azure Quickstart Center

Azure Quickstart Center is a guided experience in the Azure portal. Available to anyone who wants to improve their knowledge of Azure. For organizations new to Azure, it's the fastest way to onboard and set up your cloud environment.
Azure Quickstart Center is a guided experience in the Azure portal to help you improve your Azure knowledge. For organizations new to Azure, it's the fastest way to set up a cloud environment.

## Use Quickstart Center

1. Sign in to the [Azure portal](https://portal.azure.com).
To use Quickstart center, first sign in to the [Azure portal](https://portal.azure.com). Then, in the search bar, type "Quickstart Center", and then select it.

1. In the search bar, type "Quickstart Center", and then select it.
You can also navigate to Quickstart Center by selecting **All services** from the Azure portal menu, then selecting **General** from the service menu. Scroll down to **Get started**, then select **Quickstart Center**.

Or, select **All services** from the Azure portal menu, then select **General** > **Get started** > **Quickstart Center**.

Once you're in Quickstart Center, you'll see three tabs: **Get started**, **Projects and guides**, and **Take an online course**.
Quickstart Center shows three tabs: **Get started**, **Projects and guides**, and **Take an online course**.

## Get started

If you're new to Azure, use the checklist in the **Get started** to get familiar with some basic tasks and services. Watch videos and use the links to explore more about topics like using basic account features, estimating costs, and deploying different types of resources.

## Projects and guides

In the **Projects and guides** tab, you'll find two sections:
The **Projects and guides** tab has two sections:

* **Start a project**: If you're ready to create a resource, this section lets you learn more about your choices before you commit to an option. Select **Start** for any service to see options, learn more about scenarios, explore costs, and identify prerequisites. After making your choices, you can go directly to create.
* **Start a project**: If you're ready to create a resource, this section lets you learn more about your choices before you commit to an option. Select **Start** for any service to see options, learn more about scenarios, explore costs, and identify prerequisites. After making your choices, you can complete your deployment.

* **Setup guides**: Designed for the IT admin and cloud architect, our guides introduce key concepts for Azure adoption. Structured steps help you take action as you learn, applying Microsoft's recommended best practices. Our guides walk you through deployment scenarios to help you set up, manage, and secure your Azure environment, including migrating workloads to Azure.
* **Setup guides**: Designed for the IT admin and cloud architect, these guides introduce key concepts for Azure adoption. Structured steps help you take action as you learn, applying Microsoft's recommended best practices. Our guides walk you through deployment scenarios to help you set up, manage, and secure your Azure environment, including migrating workloads to Azure.

## Take an online course

Expand Down
4 changes: 2 additions & 2 deletions articles/container-registry/allow-access-trusted-services.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,9 +2,9 @@
title: Access Network-Restricted Registry By Trusted Azure Service
description: Enable a trusted Azure service instance to securely access a network-restricted container registry to pull or push images
ms.topic: how-to
author: tejaswikolli-web
author: rayoef
ms.service: azure-container-registry
ms.author: tejaswikolli
ms.author: rayoflores
ms.date: 10/31/2023
#customer intent: As a developer, I want to securely access a network-restricted container registry using trusted Azure services so that I can pull or push images.

Expand Down
4 changes: 2 additions & 2 deletions articles/container-registry/anonymous-pull-access.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,8 +2,8 @@
title: Enable Anonymous Pull Access in Azure Container Registry
description: Optionally enable anonymous pull access to make content in your Azure container registry publicly available
ms.topic: how-to
author: tejaswikolli-web
ms.author: tejaswikolli
author: rayoef
ms.author: rayoflores
ms.service: azure-container-registry
ms.date: 10/31/2023
#customer intent: As a user, I want to learn how to enable anonymous pull access in Azure container registry so that I can make my registry content publicly available.
Expand Down
4 changes: 2 additions & 2 deletions articles/container-registry/authenticate-aks-cross-tenant.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,8 +2,8 @@
title: Cross-Tenant Authentication from AKS to ACR
description: Configure an AKS cluster's service principal with permissions to access your Azure container registry in a different AD tenant
ms.topic: how-to
author: tejaswikolli-web
ms.author: tejaswikolli
author: rayoef
ms.author: rayoflores
ms.service: azure-container-registry
ms.date: 10/31/2023
#customer intent: As a developer, I want to configure an AKS cluster's service principal with permissions to access my Azure container registry in a different AD tenant so that I can pull images from the registry.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -2,8 +2,8 @@
title: Kubernetes Authentication Scenarios for ACR
description: Overview of options and scenarios to authenticate to an Azure container registry from a Kubernetes cluster to pull container images
ms.topic: conceptual
author: tejaswikolli-web
ms.author: tejaswikolli
author: rayoef
ms.author: rayoflores
ms.service: azure-container-registry
ms.date: 10/31/2023
---
Expand Down
4 changes: 2 additions & 2 deletions articles/container-registry/buffer-gate-public-content.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,8 +2,8 @@
title: Manage Public Content in Private Container Registry
description: Practices and workflows in Azure Container Registry to manage dependencies on public images from Docker Hub and other public content
ms.topic: how-to
author: tejaswikolli-web
ms.author: tejaswikolli
author: rayoef
ms.author: rayoflores
ms.service: azure-container-registry
ms.date: 10/31/2023
---
Expand Down
4 changes: 2 additions & 2 deletions articles/container-registry/connected-registry-glossary.md
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
---
title: "Glossary for Connected Registry with Azure Arc"
description: "Learn the terms and definitions for the connected registry extension with Azure Arc for a seamless extension deployment."
author: tejaswikolli-web
ms.author: tejaswikolli
author: rayoef
ms.author: rayoflores
ms.service: azure-container-registry
ms.topic: glossary #Don't change
ms.date: 06/18/2024
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -2,8 +2,8 @@
title: Configure Public Registry Access in Azure
description: Configure IP rules to enable access to an Azure container registry from selected public IP addresses or address ranges.
ms.topic: how-to
author: tejaswikolli-web
ms.author: tejaswikolli
author: rayoef
ms.author: rayoflores
ms.service: azure-container-registry
ms.date: 10/31/2023
---
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: Deprecated and Removed Features in Azure Container Registry
description: This article lists and notifies the features that are deprecated or removed from support for Azure Container Registry.
ms.topic: conceptual
ms.date: 10/31/2023
ms.author: tejaswikolli
ms.author: rayoflores
ms.service: azure-container-registry
---

Expand Down
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: "Optimize Image Pulls with Artifact Cache in ACR"
description: "Artifact cache is a feature that allows you to cache container images in Azure Container Registry, improving performance and efficiency."
author: tejaswikolli-web
author: rayoef
ms.service: azure-container-registry
ms.topic: conceptual #Don't change
ms.custom: devx-track-azurecli
Expand Down
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: "Preview: Artifact Streaming in Azure Container Registry"
description: "Artifact streaming is a feature in Azure Container Registry to enhance managing, scaling, and deploying artifacts through containerized platforms."
author: tejaswikolli-web
author: rayoef
ms.service: azure-container-registry
ms.custom: devx-track-azurecli
zone_pivot_groups: container-registry-zones
Expand Down
4 changes: 2 additions & 2 deletions articles/container-registry/container-registry-auth-aci.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,8 +4,8 @@ description: Learn how to provide access to images in your private container reg
ms.topic: conceptual
ms.custom: devx-track-azurecli
ms.service: azure-container-registry
author: tejaswikolli-web
ms.author: tejaswikolli
author: rayoef
ms.author: rayoflores
ms.date: 10/31/2023
---

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -4,8 +4,8 @@ description: Provide access to images in your private container registry by usin
ms.topic: conceptual
ms.custom: devx-track-azurecli
ms.service: azure-container-registry
author: tejaswikolli-web
ms.author: tejaswikolli
author: rayoef
ms.author: rayoflores
ms.date: 10/31/2023
---

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,9 +3,9 @@ title: Managed Identity Authentication for ACR
description: Provide access to images in your private container registry by using a user-assigned or system-assigned managed Azure identity.
ms.topic: how-to
ms.custom: devx-track-azurecli, devx-track-azurepowershell, linux-related-content
author: tejaswikolli-web
author: rayoef
ms.service: azure-container-registry
ms.author: tejaswikolli
ms.author: rayoflores
ms.date: 10/31/2023
#customer intent: As a developer, I want to use managed identities to authenticate to Azure Container Registry so that I can securely access container images without managing credentials.

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -2,8 +2,8 @@
title: Azure Container Registry Authentication Options Explained
description: Authentication options for a private Azure container registry, including signing in with a Microsoft Entra identity, using service principals, and using optional admin credentials.
ms.topic: conceptual
author: tejaswikolli-web
ms.author: tejaswikolli
author: rayoef
ms.author: rayoflores
ms.service: azure-container-registry
ms.date: 10/31/2023
---
Expand Down
4 changes: 2 additions & 2 deletions articles/container-registry/container-registry-auto-purge.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,8 +4,8 @@ description: Use a purge command to delete multiple tags and manifests from an A
ms.topic: how-to
ms.service: azure-container-registry
ms.custom: devx-track-azurecli
author: tejaswikolli-web
ms.author: tejaswikolli
author: rayoef
ms.author: rayoflores
ms.date: 10/31/2023
#customer intent: As a developer, I want to purge old or unnecessary images so that my Azure container registry remains clean and efficient.
---
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ title: Compliance with Azure Policy for Azure Container Registry
description: Assign built-in policy definitions in Azure Policy to audit compliance of your Azure container registries
ms.topic: conceptual
ms.service: azure-container-registry
author: tejaswikolli-web
ms.author: tejaswikolli
author: rayoef
ms.author: rayoflores
ms.date: 10/31/2023
---

Expand Down
Loading

0 comments on commit d87ede0

Please sign in to comment.