az-scout-plugin-mana-supportability

An az-scout plugin that performs best-effort detection of Azure virtual machines at risk of MANA unsupportability.

MANA (Microsoft Azure Network Adapter) is the new Azure network interface. Azure is progressively rolling MANA-capable hardware into existing VM series. When a VM using Accelerated Networking lands on MANA hardware, the guest OS must ship a MANA driver — otherwise networking degrades or fails. Network virtual appliances (NVAs) are uniquely impacted.

This plugin enumerates VMs and scale sets in the selected subscriptions, then scores each one against the documented MANA criteria using ARM metadata only — no in-guest inspection, no agent, read-only.

Detection criteria

Findings are aggregated into a single risk level per resource: none, low, medium, high or critical.

The result is a best-effort signal, not a guarantee. The guest OS of custom, Compute Gallery, shared and community-gallery images cannot be determined from ARM metadata, so they are reported as unknown (and labelled with the image kind so you know where to look). Always confirm the in-guest driver and kernel version before acting.

Features

• UI tab — "MANA readiness" with a multi-subscription checklist sidebar, summary cards, a risk filter, a searchable results table with expandable per-resource findings, and CSV export
• API routes under /plugins/mana-supportability/
• MCP tools exposed on the az-scout MCP server and in the AI chat
• Chat mode — mana-supportability-advisor

API

MCP tools

• check_mana_vm_size — is a given VM size on MANA-eligible hardware?
• list_mana_eligible_vm_series — the documented eligible-series catalogue
• assess_mana_supportability — full assessment for one or more subscriptions

Install

uv pip install az-scout-plugin-mana-supportability
az-scout  # the plugin is auto-discovered via the az_scout.plugins entry point

Development install:

uv sync --group dev
uv pip install -e .
az-scout

Structure

src/az_scout_mana_supportability/
├── __init__.py          # Plugin class + module-level `plugin` instance
├── mana_series.py       # MANA-eligible VM series catalogue + size matching
├── os_support.py        # Marketplace image → guest OS MANA support
├── nva.py               # Network virtual appliance detection
├── assessment.py        # Findings + risk engine
├── collector.py         # ARM collection (VMs, NICs, scale sets)
├── routes.py            # FastAPI APIRouter
├── tools.py             # MCP tools
└── static/
    ├── css/mana-supportability.css
    ├── html/mana-supportability-tab.html
    └── js/mana-supportability-tab.js

Required permissions

Read-only. The signed-in identity needs Reader on the assessed subscriptions:

• Microsoft.Compute/virtualMachines/read
• Microsoft.Compute/virtualMachineScaleSets/read
• Microsoft.Network/networkInterfaces/read

Quality checks

uv run ruff check src/ tests/
uv run ruff format --check src/ tests/
uv run mypy src/
uv run pytest

CI runs the same checks on Python 3.11–3.13. Releases are published to PyPI via trusted publishing (OIDC) on version tags (v*).

References

• MANA overview
• MANA on existing VM sizes
• MANA on Linux VMs
• MANA on Windows VMs
• NVA opt-out

License

MIT

Disclaimer

This tool is not affiliated with Microsoft. MANA supportability detection is best-effort and based on ARM metadata only. It cannot inspect the guest OS, installed drivers, or kernel versions. Custom, Compute Gallery, shared, community-gallery images and unrecognised publishers are reported as unknown. Microsoft's rollout dates and eligible series lists may change — always confirm against the official documentation before making changes to production workloads.