A DevOps team is implementing a hybrid deployment infrastructure for an application that consists of both Azure resources (App Service) and on-premises virtual machines. The on-premises VMs host a legacy component that needs to be updated as part of the release pipeline. The team needs to ensure that the Azure DevOps release pipeline can securely connect to and deploy artifacts to these on-premises VMs. Which Azure DevOps component is essential for enabling this connectivity and deployment?
- AAzure Network Watcher
- BAzure Pipelines Agent on the VMs
- CAzure Active Directory Connect
- DAzure VPN Gateway
Show answer & explanationAnswer & explanation
Correct answer: B. Azure Pipelines Agent on the VMs
To deploy to on-premises virtual machines from Azure DevOps, an Azure Pipelines agent (self-hosted agent) must be installed and configured on those VMs. This agent establishes a secure outbound connection to Azure DevOps and executes deployment tasks, enabling the pipeline to interact with the on-premises infrastructure.
Why the other options are wrong
- A. Azure Network Watcher is a monitoring service for network issues; it doesn't facilitate deployment to on-premises resources.
- C. Azure Active Directory Connect synchronizes identities between on-premises AD and Azure AD; it's unrelated to deployment connectivity.
- D. Azure VPN Gateway establishes network connectivity between Azure and on-premises networks, but it doesn't directly enable Azure DevOps to execute deployment tasks on individual VMs; the agent does that.
Azure Pipelines Self-Hosted Agent
An Azure Pipelines self-hosted agent is software that you install on your own infrastructure (e.g., on-premises VMs, physical servers) to run jobs from Azure Pipelines. It provides the compute capacity for your pipelines and enables deployments to environments not directly accessible by Microsoft-hosted agents.
- Connects securely outbound to Azure DevOps.
- Executes pipeline jobs and deployment tasks.
- Required for deploying to on-premises resources or specific network-restricted environments.
Memory trick: The agent is the messenger between cloud and home.