Best practices for onboarding Microsoft Azure Arc enabled servers

Published Oct 13 2021 12:26 AM 2,635 Views
Microsoft

I had the chance to speak with Ryan Willis (Senior Program Manager at Microsoft) on how to learn best practices and strategies for onboarding a wide range of resources, including Windows, Linux, SQL server, Kubernetes clusters, and Azure services across Hyper-V, VMware, Amazon Web Services, and Google Cloud Platform assets. 

 

 

 

What is Azure Arc-enabled servers?

Azure Arc-enabled servers enables you to manage your Windows and Linux physical servers and virtual machines hosted outside of Azure, on your corporate network, or other cloud provider. This management experience is designed to be consistent with how you manage native Azure virtual machines. When a hybrid machine is connected to Azure, it becomes a connected machine and is treated as a resource in Azure. Each connected machine has a Resource ID enabling the machine to be included in a resource group. Now you can benefit from standard Azure constructs, such as Azure Policy and applying tags. Service providers managing a customer's on-premises infrastructure can manage their hybrid machines, just like they do today with native Azure resources, across multiple customer environments using Azure Lighthouse.

 

You can learn more on Microsoft Docs.

 

What is Azure Arc-enabled Kubernetes?

With Azure Arc-enabled Kubernetes, you can attach and configure Kubernetes clusters located either inside or outside Azure. When you connect a Kubernetes cluster to Azure Arc, it will:

  • Appear in the Azure portal with an Azure Resource Manager ID and a managed identity.
  • Be placed in an Azure subscription and resource group.
  • Receive tags just like any other Azure resource.

Azure Arc-enabled Kubernetes supports the following scenarios:

  • Connect Kubernetes running outside of Azure for inventory, grouping, and tagging.

  • Deploy applications and apply configuration using GitOps-based configuration management.

  • View and monitor your clusters using Azure Monitor for containers.

  • Enforce threat protection using Azure Defender for Kubernetes.

  • Apply policy definitions using Azure Policy for Kubernetes.

  • Create custom locations as target locations for deploying Azure Arc-enabled Data Services, App Services on Azure Arc (including web, function, and logic apps) and Event Grid on Kubernetes.

You can learn more on Microsoft Docs.

 

3 Comments
Senior Member

Another great article and cool video :)

 

Only wish that Azure Arc enabled servers were supported on Azure Stack Hub, one can dream :)

 

Happy Azure Stacking!!!

Senior Member

For some reason posted twice so:

 

Happy Azure Stacking!!! :D

Senior Member

Does Log analytics region movement supports communication to mma agent in server?

 

Do we have to reconfigure MMA agent and  workspace.

%3CLINGO-SUB%20id%3D%22lingo-sub-2840761%22%20slang%3D%22en-US%22%3EBest%20practices%20for%20onboarding%20Microsoft%20Azure%20Arc%20enabled%20servers%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2840761%22%20slang%3D%22en-US%22%3E%3CP%3EI%20had%20the%20chance%20to%20speak%20with%20Ryan%20Willis%20(Senior%20Program%20Manager%20at%20Microsoft)%20on%20how%20to%20learn%20best%20practices%20and%20strategies%20for%20onboarding%20a%20wide%20range%20of%20resources%2C%20including%20Windows%2C%20Linux%2C%20SQL%20server%2C%20Kubernetes%20clusters%2C%20and%20Azure%20services%20across%20Hyper-V%2C%20VMware%2C%20Amazon%20Web%20Services%2C%20and%20Google%20Cloud%20Platform%20assets.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3C%2FP%3E%3CDIV%20class%3D%22video-embed-center%20video-embed%22%3E%3CIFRAME%20class%3D%22embedly-embed%22%20src%3D%22https%3A%2F%2Fcdn.embedly.com%2Fwidgets%2Fmedia.html%3Fsrc%3Dhttps%253A%252F%252Fwww.youtube.com%252Fembed%252FCf1jUPOB_vs%253Ffeature%253Doembed%26amp%3Bdisplay_name%3DYouTube%26amp%3Burl%3Dhttps%253A%252F%252Fwww.youtube.com%252Fwatch%253Fv%253DCf1jUPOB_vs%26amp%3Bimage%3Dhttps%253A%252F%252Fi.ytimg.com%252Fvi%252FCf1jUPOB_vs%252Fhqdefault.jpg%26amp%3Bkey%3Db0d40caa4f094c68be7c29880b16f56e%26amp%3Btype%3Dtext%252Fhtml%26amp%3Bschema%3Dyoutube%22%20width%3D%22600%22%20height%3D%22337%22%20scrolling%3D%22no%22%20title%3D%22YouTube%20embed%22%20frameborder%3D%220%22%20allow%3D%22autoplay%3B%20fullscreen%22%20allowfullscreen%3D%22true%22%3E%3C%2FIFRAME%3E%3C%2FDIV%3E%3CP%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22what-is-azure-arc-enabled-servers%22%20id%3D%22toc-hId--324857648%22%20id%3D%22toc-hId--324857643%22%20id%3D%22toc-hId--324857643%22%20id%3D%22toc-hId--324857643%22%20id%3D%22toc-hId--324857643%22%20id%3D%22toc-hId--324857643%22%20id%3D%22toc-hId--324857643%22%20id%3D%22toc-hId--324857643%22%3EWhat%20is%20Azure%20Arc-enabled%20servers%3F%3C%2FH2%3E%0A%3CP%3E%3CSPAN%3EAzure%20Arc-enabled%20servers%20enables%20you%20to%20manage%20your%20Windows%20and%20Linux%20physical%20servers%20and%20virtual%20machines%20hosted%26nbsp%3B%3C%2FSPAN%3E%3CEM%3Eoutside%3C%2FEM%3E%3CSPAN%3E%26nbsp%3Bof%20Azure%2C%20on%20your%20corporate%20network%2C%20or%20other%20cloud%20provider.%20This%20management%20experience%20is%20designed%20to%20be%20consistent%20with%20how%20you%20manage%20native%20Azure%20virtual%20machines.%20When%20a%20hybrid%20machine%20is%20connected%20to%20Azure%2C%20it%20becomes%20a%20connected%20machine%20and%20is%20treated%20as%20a%20resource%20in%20Azure.%20Each%20connected%20machine%20has%20a%20Resource%20ID%20enabling%20the%20machine%20to%20be%20included%20in%20a%20resource%20group.%20Now%20you%20can%20benefit%20from%20standard%20Azure%20constructs%2C%20such%20as%20Azure%20Policy%20and%20applying%20tags.%20Service%20providers%20managing%20a%20customer's%20on-premises%20infrastructure%20can%20manage%20their%20hybrid%20machines%2C%20just%20like%20they%20do%20today%20with%20native%20Azure%20resources%2C%20across%20multiple%20customer%20environments%20using%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Flighthouse%2Fhow-to%2Fmanage-hybrid-infrastructure-arc%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20data-linktype%3D%22relative-path%22%3EAzure%20Lighthouse%3C%2FA%3E%3CSPAN%3E.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20can%20learn%20more%20on%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fazure-arc%2Fservers%2Foverview%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EMicrosoft%20Docs%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22what-is-azure-arc-enabled-kubernetes%22%20id%3D%22toc-hId--2132312111%22%20id%3D%22toc-hId--2132312106%22%20id%3D%22toc-hId--2132312106%22%20id%3D%22toc-hId--2132312106%22%20id%3D%22toc-hId--2132312106%22%20id%3D%22toc-hId--2132312106%22%20id%3D%22toc-hId--2132312106%22%20id%3D%22toc-hId--2132312106%22%3EWhat%20is%20Azure%20Arc-enabled%20Kubernetes%3F%3C%2FH2%3E%0A%3CP%3EWith%20Azure%20Arc-enabled%20Kubernetes%2C%20you%20can%20attach%20and%20configure%20Kubernetes%20clusters%20located%20either%20inside%20or%20outside%20Azure.%20When%20you%20connect%20a%20Kubernetes%20cluster%20to%20Azure%20Arc%2C%20it%20will%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EAppear%20in%20the%20Azure%20portal%20with%20an%20Azure%20Resource%20Manager%20ID%20and%20a%20managed%20identity.%3C%2FLI%3E%0A%3CLI%3EBe%20placed%20in%20an%20Azure%20subscription%20and%20resource%20group.%3C%2FLI%3E%0A%3CLI%3EReceive%20tags%20just%20like%20any%20other%20Azure%20resource.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3EAzure%20Arc-enabled%20Kubernetes%20supports%20the%20following%20scenarios%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CP%3EConnect%20Kubernetes%20running%20outside%20of%20Azure%20for%20inventory%2C%20grouping%2C%20and%20tagging.%3C%2FP%3E%0A%3C%2FLI%3E%0A%3CLI%3E%3CP%3EDeploy%20applications%20and%20apply%20configuration%20using%20GitOps-based%20configuration%20management.%3C%2FP%3E%0A%3C%2FLI%3E%0A%3CLI%3E%3CP%3EView%20and%20monitor%20your%20clusters%20using%20Azure%20Monitor%20for%20containers.%3C%2FP%3E%0A%3C%2FLI%3E%0A%3CLI%3E%3CP%3EEnforce%20threat%20protection%20using%20Azure%20Defender%20for%20Kubernetes.%3C%2FP%3E%0A%3C%2FLI%3E%0A%3CLI%3E%3CP%3EApply%20policy%20definitions%20using%20Azure%20Policy%20for%20Kubernetes.%3C%2FP%3E%0A%3C%2FLI%3E%0A%3CLI%3E%3CP%3ECreate%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fazure-arc%2Fkubernetes%2Fcustom-locations%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20data-linktype%3D%22relative-path%22%3Ecustom%20locations%3C%2FA%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Eas%20target%20locations%20for%20deploying%20Azure%20Arc-enabled%20Data%20Services%2C%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fapp-service%2Foverview-arc-integration%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_self%22%20data-linktype%3D%22relative-path%22%20rel%3D%22noopener%20noreferrer%22%3EApp%20Services%20on%20Azure%20Arc%3C%2FA%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E(including%20web%2C%20function%2C%20and%20logic%20apps)%20and%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fevent-grid%2Fkubernetes%2Foverview%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_self%22%20data-linktype%3D%22relative-path%22%20rel%3D%22noopener%20noreferrer%22%3EEvent%20Grid%20on%20Kubernetes%3C%2FA%3E.%3C%2FP%3E%0A%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3EYou%20can%20learn%20more%20on%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fazure-arc%2Fkubernetes%2Foverview%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EMicrosoft%20Docs%3C%2FA%3E.%3C%2FP%3E%0A%3CH2%20class%3D%22position-fixed%20display-flex%20flex-direction-column%22%20role%3D%22navigation%22%20aria-label%3D%22Primary%22%20data-bi-name%3D%22left%20toc%22%20id%3D%22toc-hId-355200722%22%20id%3D%22toc-hId-355200727%22%20id%3D%22toc-hId-355200727%22%20id%3D%22toc-hId-355200727%22%20id%3D%22toc-hId-355200727%22%20id%3D%22toc-hId-355200727%22%20id%3D%22toc-hId-355200727%22%20id%3D%22toc-hId-355200727%22%3ELearn%20more%3A%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CNAV%20class%3D%22position-fixed%20display-flex%20flex-direction-column%22%20role%3D%22navigation%22%20aria-label%3D%22Primary%22%20data-bi-name%3D%22left%20toc%22%3E%0A%3CUL%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fazure-arc%2Foverview%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EAzure%20Arc%20overview%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3EAzure%20Cloud%20Adoption%20Framework%20for%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fcloud-adoption-framework%2Fscenarios%2Fhybrid%2Fscenario-overview%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EHybrid%20and%20Multicloud%20Scenarios%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3ELearn%20more%20about%20Arc%20enabled%20servers%2C%20see%20the%20following%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fazure-arc%2Fservers%2Foverview%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Eoverview%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3ELearn%20more%20about%20Arc%20enabled%20Kubernetes%2C%20see%20the%20following%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fazure-arc%2Fkubernetes%2Foverview%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Eoverview%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3ELearn%20more%20about%20Arc%20enabled%20data%20services%2C%20see%20the%20following%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fazure.microsoft.com%2Fservices%2Fazure-arc%2Fhybrid-data-services%2F%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Eoverview%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3EExperience%20Arc%20enabled%20services%20from%20the%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fazurearcjumpstart.io%2Fazure_arc_jumpstart%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3EJumpstart%20proof%20of%20concept%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fitops-talk-blog%2Fazure-arc-for-cloud-solutions-architects%2Fba-p%2F2521928%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%3EAzure%20Arc%20for%20Cloud%20Solutions%20Architects%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fitops-talk-blog%2Fazure-arc-for-it-pros%2Fba-p%2F2347921%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%3EAzure%20Arc%20for%20IT%20Pros%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fitops-talk-blog%2Fazure-arc-for-security-engineers%2Fba-p%2F2367830%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%3EAzure%20Arc%20for%20Security%20Engineers%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fitops-talk-blog%2Fazure-arc-for-developers%2Fba-p%2F2561513%3FWT.mc_id%3Dmodinfra-38691-thmaure%22%20target%3D%22_blank%22%3EAzure%20Arc%20for%20Developers%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FNAV%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-2840761%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20image-alt%3D%22maxresdefault.jpg%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F316963iA8BD8F9A81BB6793%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22maxresdefault.jpg%22%20alt%3D%22maxresdefault.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ELearn%20best%20practices%20and%20strategies%20for%20onboarding%20a%20wide%20range%20of%20resources%2C%20including%20Windows%2C%20Linux%2C%20SQL%20server%2C%20Kubernetes%20clusters%2C%20and%20Azure%20services%20across%20Hyper-V%2C%20VMware%2C%20Amazon%20Web%20Services%2C%20and%20Google%20Cloud%20Platform%20assets.%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2840761%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EThomas%20Maurer%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2840841%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practices%20for%20onboarding%20Microsoft%20Azure%20Arc%20enabled%20servers%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2840841%22%20slang%3D%22en-US%22%3E%3CP%3EAnother%20great%20article%20and%20cool%20video%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOnly%20wish%20that%20Azure%20Arc%20enabled%20servers%20were%20supported%20on%20Azure%20Stack%20Hub%2C%20one%20can%20dream%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHappy%20Azure%20Stacking!!!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2840858%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practices%20for%20onboarding%20Microsoft%20Azure%20Arc%20enabled%20servers%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2840858%22%20slang%3D%22en-US%22%3E%3CP%3EFor%20some%20reason%20posted%20twice%20so%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHappy%20Azure%20Stacking!!!%20%3AD%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2843789%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practices%20for%20onboarding%20Microsoft%20Azure%20Arc%20enabled%20servers%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2843789%22%20slang%3D%22en-US%22%3E%3CP%3EDoes%20Log%20analytics%20region%20movement%20supports%20communication%20to%20mma%20agent%20in%20server%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDo%20we%20have%20to%20reconfigure%20MMA%20agent%20and%26nbsp%3B%20workspace.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Co-Authors
Version history
Last update:
‎Oct 13 2021 12:28 AM
Updated by: