Custom Extension Instance Configuration

[nharper285]

Summary of the Pull Request

What is this about?
This is the final 'draft' of the Custom Extension work that we have undertaken to enable Microsoft Security Monitoring extensions for OneFuzz virtual assets. The Azure Keyvault extension has also been enabled, as it is a pre-req for the security monitoring extensions. This work leverages the InstanceConfiguration infrastructure developed by MSR.

PR Checklist

• Applies to work item: Leverage InstanceConfiguration for Custom Extensions #1187
• CLA signed. If not, go over here and sign the CLI.
• Tests added/passed
• Requires documentation to be updated
• I've discussed this with core contributors already. If not checked, I'm ready to accept this work might be rejected in favor of a different grand plan. Issue number where discussion took place: #xxx

Info on Pull Request

What does this include?
These pull request includes changes to:

• extensions.py - InstanceConfig is now fetched into the generic_extension.py function that collects the extensions deployed to virtual assets. The function now checks for the presence of the security monitoring extensions (geneva, azure monitor, azure security, keyvault) and constructs the json configuration based off the InstanceConfig extension values.
• models.py - Several new models have been added that represent the new extensions, as well as, a new generic extension class AzureVmExtensionConfig that can be used for future extension implementation.

Validation Steps Performed

How does someone test & validate?
I have fully tested this functionality by deploying a local build, configuring a valid InstanceConfig, and deploying VMSS. I have confirmed that azure monitor events show up in geneva.

[bmc-msft]

Can you confirm that the azsec extension is working correctly?

[nharper285]

Can you confirm that the azsec extension is working correctly?

I have an experiment running now that will confirm this!

[nharper285]

@bmc-msft, I can finally confirm that changes work :) Data took longer than expected to propagate to s360.

[nharper285]

@bmc-msft, I've reverted the changes.