Skip to content

Commit 134100b

Browse files
Court72Court72
authored
Merge pull request #227838 from rpsqrd/agent-1-27-relnotes
azcmagent version 1.27 relnotes
2 parents 412a0f4 + 1cb18cd commit 134100b

File tree

3 files changed

+92
-80
lines changed

3 files changed

+92
-80
lines changed

‎articles/azure-arc/servers/agent-overview.md

Lines changed: 27 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ The Azure Connected Machine agent enables you to manage your Windows and Linux m
1414

1515
:::image type="content" source="media/agent-overview/connected-machine-agent.png" alt-text="Azure Arc-enabled servers agent architectural overview." border="false":::
1616

17-
The Azure Connected Machine agent package contains several logical components, which are bundled together:
17+
The Azure Connected Machine agent package contains several logical components bundled together:
1818

1919
* The Hybrid Instance Metadata service (HIMDS) manages the connection to Azure and the connected machine's Azure identity.
2020

@@ -26,7 +26,7 @@ The Azure Connected Machine agent package contains several logical components, w
2626
* Guest assignment is stored locally for 14 days. Within the 14-day period, if the Connected Machine agent reconnects to the service, policy assignments are reapplied.
2727
* Assignments are deleted after 14 days, and are not reassigned to the machine after the 14-day period.
2828

29-
* The Extension agent manages VM extensions, including install, uninstall, and upgrade. Extensions are downloaded from Azure and copied to the `%SystemDrive%\%ProgramFiles%\AzureConnectedMachineAgent\ExtensionService\downloads` folder on Windows, and to `/opt/GC_Ext/downloads` on Linux. On Windows, the extension is installed to the following path `%SystemDrive%\Packages\Plugins\<extension>`, and on Linux the extension is installed to `/var/lib/waagent/<extension>`.
29+
* The Extension agent manages VM extensions, including install, uninstall, and upgrade. Azure downloads extensions and copies them to the `%SystemDrive%\%ProgramFiles%\AzureConnectedMachineAgent\ExtensionService\downloads` folder on Windows, and to `/opt/GC_Ext/downloads` on Linux. On Windows, the extension installs to the following path `%SystemDrive%\Packages\Plugins\<extension>`, and on Linux the extension installs to `/var/lib/waagent/<extension>`.
3030

3131
>[!NOTE]
3232
> The [Azure Monitor agent](../../azure-monitor/agents/azure-monitor-agent-overview.md) (AMA) is a separate agent that collects monitoring data, and it does not replace the Connected Machine agent; the AMA only replaces the Log Analytics agent, Diagnostics extension, and Telegraf agent for both Windows and Linux machines.
@@ -37,10 +37,10 @@ The following information describes the directories and user accounts used by th
3737

3838
### Windows agent installation details
3939

40-
The Windows agent is distributed as a Windows Installer package (MSI) and can be downloaded from the [Microsoft Download Center](https://aka.ms/AzureConnectedMachineAgent).
41-
After installing the Connected Machine agent for Windows, the following system-wide configuration changes are applied.
40+
The Windows agent is distributed as a Windows Installer package (MSI). Download the Windows agent from the [Microsoft Download Center](https://aka.ms/AzureConnectedMachineAgent).
41+
Installing the Connected Machine agent for Window applies the following system-wide configuration changes:
4242

43-
* The following installation folders are created during setup.
43+
* The installation process creates the following folders during setup.
4444

4545
| Directory | Description |
4646
|-----------|-------------|
@@ -51,15 +51,15 @@ After installing the Connected Machine agent for Windows, the following system-w
5151
| %ProgramData%\GuestConfig | Extension package downloads, guest configuration (policy) definition downloads, and logs for the extension and guest configuration services.|
5252
| %SYSTEMDRIVE%\packages | Extension package executables |
5353

54-
* The following Windows services are created on the target machine during installation of the agent.
54+
* Installing the agent creates the following Windows services on the target machine.
5555

5656
| Service name | Display name | Process name | Description |
5757
|--------------|--------------|--------------|-------------|
5858
| himds | Azure Hybrid Instance Metadata Service | himds | Synchronizes metadata with Azure and hosts a local REST API for extensions and applications to access the metadata and request Azure Active Directory managed identity tokens |
5959
| GCArcService | Guest configuration Arc Service | gc_service | Audits and enforces Azure guest configuration policies on the machine. |
6060
| ExtensionService | Guest configuration Extension Service | gc_service | Installs, updates, and manages extensions on the machine. |
6161

62-
* The following virtual service account is created during agent installation.
62+
* Agent installation creates the following virtual service account.
6363

6464
| Virtual Account | Description |
6565
|------------------|-------------|
@@ -68,20 +68,20 @@ After installing the Connected Machine agent for Windows, the following system-w
6868
> [!TIP]
6969
> This account requires the "Log on as a service" right. This right is automatically granted during agent installation, but if your organization configures user rights assignments with Group Policy, you may need to adjust your Group Policy Object to grant the right to "NT SERVICE\\himds" or "NT SERVICE\\ALL SERVICES" to allow the agent to function.
7070
71-
* The following local security group is created during agent installation.
71+
* Agent installation creates the following local security group.
7272

7373
| Security group name | Description |
7474
|---------------------|-------------|
7575
| Hybrid agent extension applications | Members of this security group can request Azure Active Directory tokens for the system-assigned managed identity |
7676

77-
* The following environmental variables are created during agent installation.
77+
* Agent installation creates the following environmental variables
7878

7979
| Name | Default value | Description |
8080
|------|---------------|------------|
8181
| IDENTITY_ENDPOINT | `http://localhost:40342/metadata/identity/oauth2/token` |
8282
| IMDS_ENDPOINT | `http://localhost:40342` |
8383

84-
* There are several log files available for troubleshooting. They are described in the following table.
84+
* There are several log files available for troubleshooting, described in the following table.
8585

8686
| Log | Description |
8787
|-----|-------------|
@@ -91,9 +91,9 @@ After installing the Connected Machine agent for Windows, the following system-w
9191
| %ProgramData%\GuestConfig\ext_mgr_logs\gc_ext.log | Records details about extension manager activity (extension install, uninstall, and upgrade events). |
9292
| %ProgramData%\GuestConfig\extension_logs | Directory containing logs for individual extensions. |
9393

94-
* The local security group **Hybrid agent extension applications** is created.
94+
* The process creates the local security group **Hybrid agent extension applications**.
9595

96-
* During uninstall of the agent, the following artifacts are not removed.
96+
* After uninstalling the agent, the following artifacts remain.
9797

9898
* %ProgramData%\AzureConnectedMachineAgent\Log
9999
* %ProgramData%\AzureConnectedMachineAgent
@@ -102,13 +102,13 @@ After installing the Connected Machine agent for Windows, the following system-w
102102

103103
### Linux agent installation details
104104

105-
The Connected Machine agent for Linux is provided in the preferred package format for the distribution (.RPM or .DEB) that's hosted in the Microsoft [package repository](https://packages.microsoft.com/). The agent is installed and configured with the shell script bundle [Install_linux_azcmagent.sh](https://aka.ms/azcmagent).
105+
The preferred package format for the distribution (.RPM or .DEB) that's hosted in the Microsoft [package repository](https://packages.microsoft.com/) provides the Connected Machine agent for Linux. The shell script bundle [Install_linux_azcmagent.sh](https://aka.ms/azcmagent) installs and configurs the agent.
106106

107-
Installing, upgrading, and removing the Connected Machine agent will not require you to restart your server.
107+
Installing, upgrading, and removing the Connected Machine agent is not required after server restart.
108108

109-
After installing the Connected Machine agent for Linux, the following system-wide configuration changes are applied.
109+
Installing the Connected Machine agent for Linux applies the following system-wide configuration changes.
110110

111-
* The following installation folders are created during setup.
111+
* Setup creates the following installation folders.
112112

113113
| Directory | Description |
114114
|-----------|-------------|
@@ -118,15 +118,15 @@ After installing the Connected Machine agent for Linux, the following system-wid
118118
| /var/opt/azcmagent/ | Configuration, log and identity token files for azcmagent CLI and instance metadata service.|
119119
| /var/lib/GuestConfig/ | Extension package downloads, guest configuration (policy) definition downloads, and logs for the extension and guest configuration services.|
120120

121-
* The following daemons are created on the target machine during installation of the agent.
121+
* Installing the agent creates the following daemons.
122122

123123
| Service name | Display name | Process name | Description |
124124
|--------------|--------------|--------------|-------------|
125125
| himdsd.service | Azure Connected Machine Agent Service | himds | This service implements the Hybrid Instance Metadata service (IMDS) to manage the connection to Azure and the connected machine's Azure identity.|
126126
| gcad.service | GC Arc Service | gc_linux_service | Audits and enforces Azure guest configuration policies on the machine. |
127127
| extd.service | Extension Service | gc_linux_service | Installs, updates, and manages extensions on the machine. |
128128

129-
* There are several log files available for troubleshooting. They are described in the following table.
129+
* There are several log files available for troubleshooting, described in the following table.
130130

131131
| Log | Description |
132132
|-----|-------------|
@@ -136,14 +136,14 @@ After installing the Connected Machine agent for Linux, the following system-wid
136136
| /var/lib/GuestConfig/ext_mgr_logs | Records details about extension manager activity (extension install, uninstall, and upgrade events). |
137137
| /var/lib/GuestConfig/extension_logs | Directory containing logs for individual extensions. |
138138

139-
* The following environment variables are created during agent installation. These variables are set in `/lib/systemd/system.conf.d/azcmagent.conf`.
139+
* Agent installation creates the following environment variables, set in `/lib/systemd/system.conf.d/azcmagent.conf`.
140140

141141
| Name | Default value | Description |
142142
|------|---------------|-------------|
143143
| IDENTITY_ENDPOINT | `http://localhost:40342/metadata/identity/oauth2/token` |
144144
| IMDS_ENDPOINT | `http://localhost:40342` |
145145

146-
* During uninstall of the agent, the following artifacts are not removed.
146+
* After uninstalling the agent, the following artifacts remain.
147147

148148
* /var/opt/azcmagent
149149
* /var/lib/GuestConfig
@@ -152,14 +152,15 @@ After installing the Connected Machine agent for Linux, the following system-wid
152152

153153
The Azure Connected Machine agent is designed to manage agent and system resource consumption. The agent approaches resource governance under the following conditions:
154154

155-
* The Guest Configuration agent is limited to use up to 5% of the CPU to evaluate policies.
156-
* The Extension Service agent is limited to use up to 5% of the CPU to install, upgrade, run, and delete extensions. The following exceptions apply:
155+
* The Guest Configuration agent can use up to 5% of the CPU to evaluate policies.
156+
* The Extension Service agent can use up to 5% of the CPU to install, upgrade, run, and delete extensions. The following exceptions apply:
157157

158-
* If the extension installs background services that run independent of Azure Arc, such as the Microsoft Monitoring Agent, those services will not be subject to the resource governance constraints listed above.
159-
* The Log Analytics agent and Azure Monitor Agent are allowed to use up to 60% of the CPU during their install/upgrade/uninstall operations on Red Hat Linux, CentOS, and other enterprise Linux variants. The limit is higher for this combination of extensions and operating systems to accommodate the performance impact of [SELinux](https://www.redhat.com/en/topics/linux/what-is-selinux) on these systems.
158+
* If the extension installs background services that run independent of Azure Arc, such as the Microsoft Monitoring Agent, those services are not subject to the resource governance constraints listed above.
159+
* The Log Analytics agent and Azure Monitor Agent can use up to 60% of the CPU during their install/upgrade/uninstall operations on Red Hat Linux, CentOS, and other enterprise Linux variants. The limit is higher for this combination of extensions and operating systems to accommodate the performance impact of [SELinux](https://www.redhat.com/en/topics/linux/what-is-selinux) on these systems.
160160
* The Azure Monitor Agent can use up to 30% of the CPU during normal operations.
161161
* The Linux OS Update Extension (used by Azure Update Management Center) can use up to 30% of the CPU to patch the server.
162162
* The Microsoft Defender for Endpoint extension can use up to 30% of the CPU during installation, upgrades, and removal operations.
163+
* The Microsoft Sentinel DNS extension can use up to 30% of the CPU to collect logs from DNS servers
163164

164165
## Instance metadata
165166

@@ -195,7 +196,7 @@ Metadata information about a connected machine is collected after the Connected
195196
* Service accounts
196197
* Zone
197198

198-
The following metadata information is requested by the agent from Azure:
199+
The agent requests the following metadata information from Azure:
199200

200201
* Resource location (region)
201202
* Virtual machine ID
@@ -209,7 +210,7 @@ The following metadata information is requested by the agent from Azure:
209210
210211
## Deployment options and requirements
211212

212-
To deploy the agent and connect a machine, certain [prerequisites](prerequisites.md) must be met. There are also [networking requirements](network-requirements.md) to be aware of.
213+
Agent deployment and machine connection requires certain [prerequisites](prerequisites.md). There are also [networking requirements](network-requirements.md) to be aware of.
213214

214215
We provide several options for deploying the agent. For more information, see [Plan for deployment](plan-at-scale-deployment.md) and [Deployment options](deployment-options.md).
215216

0 commit comments

Comments
 (0)