Merge pull request #255400 from MicrosoftDocs/main

Publish to Live Wednesday 4AM PST, 10/18

Author: PMEds28

.openpublishing.redirection.azure-productivity.json

@@ -204,6 +204,16 @@
       "source_path": "articles/lab-services/how-to-create-lab-template.md",
       "redirect_url": "/azure/lab-services/how-to-create-lab-bicep",
       "redirect_document_id": false
+    },
+    {
+      "source_path": "articles/lab-services/migrate-to-2022-update.md",
+      "redirect_url": "/azure/lab-services/how-to-migrate-lab-acounts-to-lab-plans",
+      "redirect_document_id": true
+    },
+    {
+      "source_path": "articles/lab-services/lab-services-whats-new.md",
+      "redirect_url": "/azure/lab-services/concept-lab-accounts-versus-lab-plans",
+      "redirect_document_id": true
     }
   ]
 }

articles/active-directory/develop/msal-acquire-cache-tokens.md

@@ -98,8 +98,8 @@ In public client applications like desktop and mobile apps, you can:
 For confidential client applications (web app, web API, or a daemon application like a Windows service), you can;
 
 - Acquire tokens **for the application itself** and not for a user, using the [client credentials flow](msal-authentication-flows.md#client-credentials). This technique can be used for syncing tools, or tools that process users in general and not a specific user.
-- Use the [on-behalf-of (OBO) flow](msal-authentication-flows.md#on-behalf-of-obo) for a web API to call an API on behalf of the user. The application is identified with client credentials in order to acquire a token based on a user assertion (SAML, for example, or a JWT token). This flow is used by applications that need to access resources of a particular user in service-to-service calls.
-- Acquire tokens using the [authorization code flow](msal-authentication-flows.md#authorization-code) in web apps after the user signs in through the authorization request URL. OpenID Connect application typically use this mechanism, which lets the user sign in using OpenID Connect and then access web APIs on behalf of the user.
+- Use the [on-behalf-of (OBO) flow](msal-authentication-flows.md#on-behalf-of-obo) for a web API to call an API on behalf of the user. The application is identified with client credentials in order to acquire a token based on a user assertion (SAML, for example, or a JWT token). This flow is used by applications that need to access resources of a particular user in service-to-service calls. Tokens should be cached on a session basis, not on a user basis.
+- Acquire tokens using the [authorization code flow](msal-authentication-flows.md#authorization-code) in web apps after the user signs in through the authorization request URL. OpenID Connect application typically use this mechanism, which lets the user sign in using OpenID Connect and then access web APIs on behalf of the user. Tokens may be cached on a user or on a session basis. If caching tokens on a user basis, we recommend to limit the session lifetime, so that Microsoft Entra ID may check the state of the Conditional Access policies frequently.
 
 ## Authentication results
 

articles/aks/supported-kubernetes-versions.md

@@ -50,6 +50,7 @@ For the past release history, see [Kubernetes history](https://github.com/kubern
 | 1.26 | Dec 2022 | Feb 2023 | Apr 2023 | Mar 2024 | Until 1.30 GA |
 | 1.27* | Apr 2023 | Jun 2023 | Jul 2023 | Jul 2024, LTS until Jul 2025 | Until 1.31 GA |
 | 1.28 | Aug 2023 | Sep 2023 | Oct 2023 || Until 1.32 GA|
+| 1.29 | Dec 2023 | Jan 2024 | Feb 2024 | | Until 1.33 GA |
 
 *\* Indicates the version is designated for Long Term Support*
 

articles/azure-arc/vmware-vsphere/perform-vm-ops-through-azure.md

@@ -2,14 +2,14 @@
 title: Perform VM operations on VMware VMs through Azure
 description: Learn how to view the operations that you can do on VMware virtual machines and install the Log Analytics agent.
 ms.topic: how-to 
-ms.date: 08/18/2023
+ms.date: 10/17/2023
 ms.service: azure-arc
 ms.subservice: azure-arc-vmware-vsphere
 ---
 
 # Manage VMware VMs in Azure through Arc-enabled VMware vSphere
 
-In this article, you will learn how to perform various operations on the Azure Arc-enabled VMware vSphere (preview) VMs such as:
+In this article, you learn how to perform various operations on the Azure Arc-enabled VMware vSphere (preview) VMs such as:
 
 - Start, stop, and restart a VM
 
@@ -21,31 +21,12 @@ In this article, you will learn how to perform various operations on the Azure A
 
 - Enable guest management
 
-- Install extensions (enabling guest management is required)
+- Install extensions (enabling guest management is required). All the [extensions](../servers/manage-vm-extensions.md#extensions) that are available with Arc-enabled Servers are supported.
 
 :::image type="content" source="media/browse-virtual-machines.png" alt-text="Screenshot showing the VMware virtual machine operations." lightbox="media/manage-virtual-machines.png":::
 
 To perform guest OS operations on Arc-enabled VMs, you must enable guest management on the VMs. When you enable guest management, the Arc Connected Machine Agent is installed on the VM.
 
-## Supported extensions and management services
-
-### Windows extensions
-
-|Extension |Publisher |Type |
-|----------|----------|-----|
-|Custom Script extension |Microsoft.Compute | CustomScriptExtension |
-|Log Analytics agent |Microsoft.EnterpriseCloud.Monitoring |MicrosoftMonitoringAgent |
-|Azure Automation Hybrid Runbook Worker extension (preview) |Microsoft.Compute | HybridWorkerForWindows| 
-
-
-### Linux extensions
-
-|Extension |Publisher |Type |
-|----------|----------|-----|
-|Custom Script extension |Microsoft.Azure.Extensions |CustomScript |
-|Log Analytics agent |Microsoft.EnterpriseCloud.Monitoring |OmsAgentForLinux |
-|Azure Automation Hybrid Runbook Worker extension (preview) | Microsoft.Compute | HybridWorkerForLinux|
-
 ## Enable guest management
 
 Before you can install an extension, you must enable guest management on the VMware VM.  
@@ -54,7 +35,7 @@ Before you can install an extension, you must enable guest management on the VMw
 
    - is running a [supported operating system](../servers/prerequisites.md#supported-operating-systems).
 
-   - is able to connect through the firewall to communicate over the internet and these [URLs](../servers/network-requirements.md#urls) are not blocked.
+   - is able to connect through the firewall to communicate over the internet and these [URLs](../servers/network-requirements.md#urls) aren't blocked.
 
    - has VMware tools installed and running.
 
@@ -73,18 +54,6 @@ Before you can install an extension, you must enable guest management on the VMw
 
    For Linux, use the root account, and for Windows, use an account that is a member of the Local Administrators group.
 
-## Install the LogAnalytics extension
-
-1. From your browser, go to the [Azure portal](https://portal.azure.com).
-
-1. Search for and select the VMware VM that you want to install extension.
-
-1. Navigate to **Extensions** and select **Add**.
-
-1. Select the extension you want to install. Based on the extension, you'll need to provide configuration details, such as the workspace ID and primary key for Log Analytics extension. Then select **Review + create**.
-
-The deployment starts the installation of the extension on the selected VM.
-
 ## Delete a VM
 
 If you no longer need the VM, you can delete it.
@@ -102,4 +71,4 @@ If you no longer need the VM, you can delete it.
 
 ## Next steps
 
-[Create a VM using Azure Arc-enabled vSphere](quick-start-create-a-vm.md)
+[Create a VM using Azure Arc-enabled vSphere](quick-start-create-a-vm.md).