Azure VM Agent Status not ready

The important detail here is --outbound-type UserDefinedRouting. With UDR, Azure Red Hat OpenShift does not manage Internet egress for you; you are responsible for providing the required outbound path through your firewall/NVA and allowing the endpoints the cluster needs. I would first check az aro show for the provisioning state, then verify the route tables on both master and worker subnets and inspect firewall logs for blocked HTTPS traffic. ARO infrastructure VMs are managed resources, so I would avoid modifying their NICs or disks directly. If provisioning never completes after validating egress, collect the cluster resource ID and deployment/correlation information and raise an Azure support case.