Merge pull request #1700 from Blackmist/344992-vulnerability

feedback

Author: prmerger-automator[bot]

articles/machine-learning/concept-vulnerability-management.md

@@ -59,6 +59,8 @@ Associated with your Azure Machine Learning workspace is an Azure Container Regi
 
 Azure Machine Learning doesn't delete any image from your container registry. You're responsible for evaluating the need for an image over time. To monitor and maintain environment hygiene, you can use [Microsoft Defender for Container Registry](/azure/defender-for-cloud/defender-for-container-registries-usage) to help scan your images for vulnerabilities. To automate your processes based on triggers from Microsoft Defender, see [Automate remediation responses](/azure/defender-for-cloud/workflow-automation).
 
+For more information, visit [address vulnerabilities in environments](how-to-troubleshoot-environments.md#vulnerabilities-in-azureml-environments).
+
 ## Using a private package repository
 
 Azure Machine Learning uses Conda and Pip to install Python packages. By default, Azure Machine Learning downloads packages from public repositories. If your organization requires you to source packages only from private repositories like Azure DevOps feeds, you can override the Conda and Pip configuration as part of your base images and your environment configurations for compute instances.
@@ -162,6 +164,9 @@ When your clusters run jobs without interruption, running jobs might run outdate
 
 To observe whether your Azure Arc cluster is running the latest version of `amlarc`, use the Azure portal. Under your Azure Arc resource of the type **Kubernetes - Azure Arc**, go to **Extensions** to find the version of the `amlarc` extension.
 
+> [!IMPORTANT]
+> If you have disabled auto update by using the `--auto-upgrade false` parameter of the `az k8s-extension create` command, you must manually update the extension by using `az k8s-extension update`. For information on the versions of this extension, visit the [release notes](/azure/machine-learning/reference-kubernetes#azuremml-extension-release-note).
+
 ## AutoML and Designer environments
 
 For code-based training experiences, you control which Azure Machine Learning environment to use. With AutoML and the designer, the environment is encapsulated as part of the service. These types of jobs can run on computes that you configure, to allow for extra controls such as network isolation.