fix gitleaks false positive

Author: josielsouzanordcloud

scripts/powershell/arc-setup.ps1

@@ -160,6 +160,17 @@ try {
         Write-Log "Could not remove scheduled task: $($_.Exception.Message)" "WARNING"
     }
 
+    # Re-enable the Guest Agent so Azure Run Command can report success back to Azure.
+    # Arc evaluation posture is preserved: MSFT_ARC_TEST env var and the IMDS firewall
+    # block (169.254.169.254) both persist independently of the Guest Agent. # gitleaks:allow
+    # The Guest Agent uses WireServer (168.63.129.16), not IMDS, so it does not # gitleaks:allow
+    # interfere with Arc evaluation mode.
+    Write-Log "Re-enabling Azure VM Guest Agent for Run Command status reporting..." "INFO"
+    Set-Service WindowsAzureGuestAgent -StartupType Automatic -ErrorAction SilentlyContinue
+    Start-Service WindowsAzureGuestAgent -ErrorAction SilentlyContinue
+    Start-Sleep -Seconds 20
+    Write-Log "Azure VM Guest Agent re-enabled" "SUCCESS"
+
     Write-Log "=========================================" "SUCCESS"
     Write-Log "Azure Arc Setup Completed Successfully!" "SUCCESS"
     Write-Log "=========================================" "SUCCESS"