Skip to content

Commit d0a4350

Browse files
authored
Merge pull request #266228 from nikhilkaul-msft/private-link-agent-service
Update chaos-studio-private-link-agent-service.md
2 parents 09f5e15 + 760c1c2 commit d0a4350

File tree

1 file changed

+2
-85
lines changed

1 file changed

+2
-85
lines changed

articles/chaos-studio/chaos-studio-private-link-agent-service.md

Lines changed: 2 additions & 85 deletions
Original file line numberDiff line numberDiff line change
@@ -140,90 +140,7 @@ az rest --verbose --skip-authorization-header --header "Authorization=Bearer $ac
140140
> [!NOTE]
141141
> The PrivateAccessID should exactly match the "resourceID" used to create the CSPA resource in Step 1.
142142
143-
## Step 4: Update host VM to map the communications endpoint to the private endpoint
144-
145-
During the Preview of this feature, customers need to update the Agent VM extensions settings to point to the communication endpoint that supports traffic over a private network. Customers need to update the host entry on the actual VM to map the communication endpoint to the private IP generated during the private endpoint creation. You can get the IP address from the "DNS Configuration" tab in the Private Endpoint resource seen in the following screenshot:
146-
147-
[![Screenshot of Private Endpoint DNS Config tab.](images/dns-config.png)](images/dns-config.png#lightbox)
148-
149-
After noting the IP address, you need to open the "hosts" file on your host VM and update it with the following entry:
150-
151-
```
152-
<IP address> acs-frontdoor-prod-<azureRegion>.chaosagent.trafficmanager.net
153-
```
154-
155-
> [!NOTE]
156-
> **Path of hosts file on Windows:** C:\Windows\System32\drivers\etc
157-
>
158-
>
159-
> **Path of hosts file on Linux:** /etc/hosts
160-
161-
Example of what the "hosts" file should look like. The IP address and Azure region change for your scenario:
162-
163-
[![Screenshot of hosts file.](images/cspa-hosts.png)](images/cspa-hosts.png#lightbox)
164-
165-
Save and close the file.
166-
167-
## Step 5: Update the communication endpoint in agentSettings and agentInstanceConfig JSON files
168-
169-
In this step, you need to continue to edit files on the host VM machine. You need to update the "agentSettings.json" and "agentInstanceConfig.json" files to include the communication endpoint based on the region in which the VM targets were created in the previous steps.
170-
171-
### Updating the agentSettings.json
172-
173-
> [!NOTE]
174-
> **Path of agentSettings.json file on Windows:** C:\Packages\Plugins\Microsoft.Azure.Chaos.ChaosWindowsAgent-\<Version\>\win-x64\agentSettings.json
175-
>
176-
>
177-
> **Path of agentSettings.json file on Linux:** /var/lib/waagent/Microsoft.Azure.Chaos.ChaosLinuxAgent-\<Version\>\linux-x64
178-
179-
<br/>
180-
181-
**Communication endpoint format:** https://acs-frontdoor-prod-\<azureRegion\>.chaosagent.trafficmanager.net
182-
183-
<br/>
184-
185-
Example of updated agentSettings.json:
186-
187-
[![Screenshot of agentSettings JSON.](images/agent-settings-json.png)](images/agent-settings-json.png#lightbox)
188-
189-
190-
### Updating the agentInstanceConfig.json
191-
192-
> [!NOTE]
193-
> **Path of agentInstanceConfig.json file on Windows:** C:\Windows\System32\config\systemprofile\.azure-chaos- agent\data
194-
>
195-
>
196-
> **Path of agentInstanceConfig.json file on Linux:** /.azure-chaos-agent/data/agentInstanceConfig.json
197-
198-
<br/>
199-
200-
**Communication endpoint format:** https://acs-frontdoor-prod-\<azureRegion\>.chaosagent.trafficmanager.net
201-
202-
<br/>
203-
204-
Example of updated agentInstanceConfig.json:
205-
206-
[![Screenshot of agentInstanceConfig JSON.](images/agent-instance-config-json.png)](images/agent-instance-config-json.png#lightbox)
207-
208-
## Step 5.5: Disable CRL verification in agentSettings.JSON
209-
210-
**IF** you blocked outbound access to Microsoft Certificate Revocation List (CRL) verification endpoints, then you need to update agentSettings.JSON to disable CRL verification check in the agent.
211-
212-
By default this field is set to **true**, so you can either remove this field or set the value to false. See [here](chaos-studio-tutorial-agent-based-cli.md) for more details.
213-
214-
```
215-
"communicationApi": {
216-
"checkCertRevocation": false
217-
}
218-
```
219-
220-
The final agentSettings.JSON should appear as shown:
221-
222-
[![Screenshot of agentSettings JSON with disabled CRL verification.](images/agent-settings-crl.png)](images/agent-settings-crl.png#lightbox)
223-
224-
If outbound access to Microsoft CRL verification endpoints is not blocked, then you can ignore this step.
225-
226-
## Step 6: Restart the Azure Chaos Agent service in the VM
143+
## Step 4: Restart the Azure Chaos Agent service in the VM
227144

228145
After making all the required changes to the host, restart the Azure Chaos Agent Service in the VM
229146

@@ -241,7 +158,7 @@ Systemctl restart azure-chaos-agent
241158

242159
[![Screenshot of restarting Linux VM.](images/restart-linux-vm.png)](images/restart-linux-vm.png#lightbox)
243160

244-
## Step 7: Run your Agent-based experiment using private endpoints
161+
## Step 5: Run your Agent-based experiment using private endpoints
245162

246163
After the restart, the Chaos agent should be able to communicate with the Agent Communication data plane service and the agent registration to the data plane should be successful. After successful registration, the agent will be able to heartbeat its status and you can go ahead and run the chaos agent-based experiments using private endpoints!
247164

0 commit comments

Comments
 (0)