diff --git a/scripts/troubleshoot/README.md b/scripts/troubleshoot/README.md
index 5ffa07639..650a5df6f 100644
--- a/scripts/troubleshoot/README.md
+++ b/scripts/troubleshoot/README.md
@@ -1,5 +1,14 @@
 # Troubleshoot Guide for Azure Monitor for containers
 
+# Azure Arc-enabled Kubernetes
+The table below summarizes known issues you may face while using Azure Monitor for containers .
+
+| Issues and Error Messages  | Action |
+| ---- | --- |
+| Error Message `No data for selected filters`  | It may take some time to establish monitoring data flow for newly created clusters. Please allow at least 10-15 minutes for data to appear for your cluster. |
+| Error Message `Error retrieving data` | While Azure Arc-enabled Kubernetes cluster is setting up for health and performance monitoring, a connection is established between the cluster and Azure Log Analytics workspace. Log Analytics workspace is used to store all monitoring data for your cluster. This error may occurr when your Log Analytics workspace has been deleted or lost. Please check whether your Log Analytics workspace is available. To find your Log Analytics workspace go [here.](https://docs.microsoft.com/en-us/azure/log-analytics/log-analytics-manage-access) and your workspace is available. If the workspace is missing, you will have to delete and create Microsoft.AzureMonitor.Containers extension https://docs.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-enable-arc-enabled-clusters?toc=/azure/azure-arc/kubernetes/toc.json. |
+
+
 # Azure Kubernetes Service (AKS)
 The table below summarizes known issues you may face while using Azure Monitor for containers .
 
@@ -67,5 +76,26 @@ Please send this file to [AskCoin](mailto:askcoin@microsoft.com). We will respon
 For more details on Azure Resource Manager template deployment via cli refer to [this documentation](https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-template-deploy-cli).
 
 If steps above did not help to resolve your issue, you can use either of the following methods to contact us for help:
-*	File a [GitHub Issue](https://github.com/Microsoft/OMS-docker/issues)
+*	File a [GitHub Issue](https://github.com/microsoft/Docker-Provider/issues)
 *	Email [AskCoin](mailto:askcoin@microsoft.com) : Please attach the TroubleshootErrorDump.txt in the email generated by the troubleshooting script if you had tried running the script to solve your problem.
+
+# Azure Arc-enabled Kubernetes
+
+You can use the troubleshooting script provided [here](https://raw.githubusercontent.com/microsoft/Docker-Provider/ci_dev/scripts/troubleshoot/troubleshooterrors.sh) to diagnose the problem.
+
+Steps:
+- Before executing the Troubleshooting script, please install following pre-requisistes if you dont have already
+   - Install [Azure-CLI](https://docs.microsoft.com/en-us/cli/azure/install-azure-cli)
+   - Install [kubectl](https://kubernetes.io/docs/tasks/tools/#kubectl)
+   - Install [jq](https://stedolan.github.io/jq/download/)
+- Download and execute the script
+  ``` bash
+     curl -LO https://raw.githubusercontent.com/microsoft/Docker-Provider/ci_dev/scripts/troubleshoot/troubleshooterrors.sh
+     bash troubleshooterrors.sh --resource-id <azureArcK8sConnectedClusterResourceId> --kube-context <kubeContextofK8sCluster>
+  ```
+- This script will generate a TroubleshootDump.log which collects detailed information about container health onboarding.
+Please send this file to [AskCoin](mailto:askcoin@microsoft.com). We will respond back to you.
+
+If steps above did not help to resolve your issue, you can use either of the following methods to contact us for help:
+*	File a [GitHub Issue](https://github.com/microsoft/Docker-Provider/issues)
+*	Email [AskCoin](mailto:askcoin@microsoft.com) : Please attach the TroubleshootErrorDump.log in the email generated by the troubleshooting script if you had tried running the script to solve your problem.
\ No newline at end of file
diff --git a/scripts/troubleshoot/troubleshooterrors.sh b/scripts/troubleshoot/troubleshooterrors.sh
new file mode 100644
index 000000000..ac08d7afc
--- /dev/null
+++ b/scripts/troubleshoot/troubleshooterrors.sh
@@ -0,0 +1,485 @@
+#!/bin/bash
+#
+#  This script troubleshoots errors related to onboarding of Azure Monitor for containers to Kubernetes cluster hosted outside and connected to Azure via Azure Arc cluster
+# Prerequisites :
+#     Azure CLI:  https://docs.microsoft.com/en-us/cli/azure/install-azure-cli?view=azure-cli-latest
+
+# bash troubelshooterror.sh --resource-id <clusterResourceId> --kube-context <kube-context>
+
+set -e
+set -o pipefail
+
+logFile="TroubleshootDump.log"
+clusterType="connectedClusters"
+extensionInstanceName="azuremonitor-containers"
+# resource type for azure log analytics workspace
+workspaceResourceProvider="Microsoft.OperationalInsights/workspaces"
+workspaceSolutionResourceProvider="Microsoft.OperationsManagement/solutions"
+agentK8sNamespace="kube-system"
+azureArcK8sNamespace="azure-arc"
+agentK8sSecretName="omsagent-secret"
+agentK8sDeploymentName="omsagent-rs"
+agentK8sLinuxDaemonsetName="omsagent"
+agentArcK8sIdentityCRDName="container-insights-clusteridentityrequest"
+workspaceId=""
+workspacePrimarySharedKey=""
+contactUSMessage="Please contact us by emailing askcoin@microsoft.com if you need any help with TroubleshootDump.log generated by this script"
+dataCapHelpMessage="Please review and increase data cap https://docs.microsoft.com/en-us/azure/azure-monitor/logs/manage-cost-storage"
+workspacePrivateLinkMessage="Please review this doc https://docs.microsoft.com/en-us/azure/azure-monitor/logs/private-link-security"
+azureCLIInstallLinkMessage="Please install Azure-CLI as per the instructions https://docs.microsoft.com/en-us/cli/azure/install-azure-cli and rerun the troubleshooting script"
+kubectlInstallLinkMessage="Please install kubectl as per the instructions https://kubernetes.io/docs/tasks/tools/#kubectl and rerun the troubleshooting script"
+jqInstallLinkMessage="Please install jq as per instructions https://stedolan.github.io/jq/download/ and rerun the troubleshooting script"
+ciExtensionReOnboarding="Please reinstall extension as per instructions https://docs.microsoft.com/en-us/azure/azure-monitor/containers/container-insights-enable-arc-enabled-clusters?toc=/azure/azure-arc/kubernetes/toc.json"
+timesyncHelpMessage="Please check if you have any timesync issues on your cluster nodes"
+
+log_message() {
+  echo "$@"
+  echo ""
+  echo "$@" >> $logFile
+}
+
+
+login_to_azure() {
+  if [ "$isUsingServicePrincipal" = true ]; then
+    log_message "login to the azure using provided service principal creds"
+    az login --service-principal --username="$servicePrincipalClientId" --password="$servicePrincipalClientSecret" --tenant="$servicePrincipalTenantId"
+  else
+    log_message "login to the azure interactively"
+    az login --use-device-code
+  fi
+}
+
+set_azure_subscription() {
+  local subscriptionId="$(echo ${1})"
+  log_message "setting the subscription id: ${subscriptionId} as current subscription for the azure cli"
+  az account set -s ${subscriptionId}
+  log_message "successfully configured subscription id: ${subscriptionId} as current subscription for the azure cli"
+}
+
+usage() {
+  local basename=$(basename $0)
+  echo
+  echo "Troubleshooting Errors related to Azure Monitor for containers:"
+  echo "$basename --resource-id <cluster resource id> [--kube-context <name of the kube context >]"
+}
+
+parse_args() {
+
+  if [ $# -le 1 ]; then
+    usage
+    exit 1
+  fi
+
+  # Transform long options to short ones
+  for arg in "$@"; do
+    shift
+    case "$arg" in
+    "--resource-id") set -- "$@" "-r" ;;
+    "--kube-context") set -- "$@" "-k" ;;
+    "--"*) usage ;;
+    *) set -- "$@" "$arg" ;;
+    esac
+  done
+
+  local OPTIND opt
+
+  while getopts 'hk:r:' opt; do
+    case "$opt" in
+    h)
+      usage
+      ;;
+
+    k)
+      kubeconfigContext="$OPTARG"
+      log_message "name of kube-context is $OPTARG"
+      ;;
+
+    r)
+      clusterResourceId="$OPTARG"
+      log_message "clusterResourceId is $OPTARG"
+      ;;
+
+    ?)
+      usage
+      exit 1
+      ;;
+    esac
+  done
+  shift "$(($OPTIND - 1))"
+
+  local subscriptionId="$(echo ${clusterResourceId} | cut -d'/' -f3)"
+  local resourceGroup="$(echo ${clusterResourceId} | cut -d'/' -f5)"
+
+  # get resource parts and join back to get the provider name
+  local providerNameResourcePart1="$(echo ${clusterResourceId} | cut -d'/' -f7)"
+  local providerNameResourcePart2="$(echo ${clusterResourceId} | cut -d'/' -f8)"
+  local providerName="$(echo ${providerNameResourcePart1}/${providerNameResourcePart2})"
+
+  local clusterName="$(echo ${clusterResourceId} | cut -d'/' -f9)"
+
+  # convert to lowercase for validation
+  providerName=$(echo $providerName | tr "[:upper:]" "[:lower:]")
+
+  log_message "cluster SubscriptionId:" $subscriptionId
+  log_message "cluster ResourceGroup:" $resourceGroup
+  log_message "cluster ProviderName:" $providerName
+  log_message "cluster Name:" $clusterName
+
+  if [ -z "$subscriptionId" -o -z "$resourceGroup" -o -z "$providerName" -o -z "$clusterName" ]; then
+    log_message "-e invalid cluster resource id. Please try with valid fully qualified resource id of the cluster"
+    exit 1
+  fi
+
+  if [[ $providerName != microsoft.* ]]; then
+    log_message "-e invalid azure cluster resource id format."
+    exit 1
+  fi
+
+  # detect the resource provider from the provider name in the cluster resource id
+  if [ $providerName = "microsoft.kubernetes/connectedclusters" ]; then
+    log_message "provider cluster resource is of Azure Arc enabled Kubernetes cluster type"
+    isArcK8sCluster=true
+    resourceProvider=$arcK8sResourceProvider
+  else
+    log_message "-e not valid azure arc enabled kubernetes cluster resource id"
+    exit 1
+  fi
+
+  if [ -z "$kubeconfigContext" ]; then
+    log_message "using or getting current kube config context since --kube-context parameter not set "
+  fi
+
+  if [ ! -z "$servicePrincipalClientId" -a ! -z "$servicePrincipalClientSecret" -a ! -z "$servicePrincipalTenantId" ]; then
+    log_message "using service principal creds (clientId, secret and tenantId) for azure login since provided"
+    isUsingServicePrincipal=true
+  fi
+}
+
+command_exists() {
+	command -v "$@" > /dev/null 2>&1
+}
+
+validate_ci_extension() {
+  log_message "START:validate_ci_extension"
+  extension=$(az k8s-extension show -c ${4} -g ${3} -t $clusterType -n $extensionInstanceName)
+  log_message $extension
+  configurationSettings=$(az k8s-extension show -c ${4} -g ${3} -t $clusterType -n $extensionInstanceName --query "configurationSettings")
+  if [ -z "$configurationSettings" ]; then
+     log_message "-e error configurationSettings either null or empty"
+     log_message ${contactUSMessage}
+     exit 1
+  fi
+  logAnalyticsWorkspaceResourceID=$(az k8s-extension show -c ${4} -g ${3} -t $clusterType -n $extensionInstanceName --query "configurationSettings.logAnalyticsWorkspaceResourceID" -o tsv | tr "[:upper:]" "[:lower:]" | tr -d "[:space:]")
+  log_message "Extension logAnalyticsWorkspaceResourceID: ${logAnalyticsWorkspaceResourceID}"
+  if [ -z "$logAnalyticsWorkspaceResourceID" ]; then
+     log_message "-e error logAnalyticsWorkspaceResourceID either null or empty in the config settings"
+     log_message ${contactUSMessage}
+     exit 1
+  fi
+
+  provisioningState=$(az k8s-extension show -c ${4} -g ${3} -t $clusterType -n $extensionInstanceName  --query "provisioningState" -o tsv | tr "[:upper:]" "[:lower:]" | tr -d "[:space:]")
+  log_message "Extension provisioningState: ${provisioningState}"
+  if [ -z "$provisioningState" ]; then
+     log_message "-e error provisioningState either null or empty in the config settings"
+     log_message ${contactUSMessage}
+     exit 1
+  fi
+  if [ "$provisioningState" != "succeeded" ]; then
+     log_message "-e error expected state of extension provisioningState MUST be succeeded state but actual state is ${provisioningState}"
+     log_message ${contactUSMessage}
+     exit 1
+  fi
+  logAnalyticsWorkspaceDomain=$(az k8s-extension show -c ${4} -g ${3} -t $clusterType -n $extensionInstanceName --query 'configurationSettings."omsagent.domain"')
+  log_message "Extension logAnalyticsWorkspaceDomain: ${logAnalyticsWorkspaceDomain}"
+  if [ -z "$logAnalyticsWorkspaceDomain" ]; then
+     log_message "-e error logAnalyticsWorkspaceDomain either null or empty in the config settings"
+     log_message ${contactUSMessage}
+     exit 1
+  fi
+  azureCloudName=${1}
+  if [ "$azureCloudName" = "azureusgovernment" ]; then
+     log_message "az cli configured cloud name:$azureCloudName"
+     if [ $logAnalyticsWorkspaceDomain = "opinsights.azure.us" ]; then
+        log_message "-e error expected value of logAnalyticsWorkspaceDomain  MUST opinsights.azure.us but actual value is ${logAnalyticsWorkspaceDomain}"
+        log_message ${contactUSMessage}
+        exit 1
+     fi
+  elif [ "$azureCloudName" = "azurecloud" ]; then
+    log_message "az cli configured cloud name:$azureCloudName"
+    if [ $logAnalyticsWorkspaceDomain = "opinsights.azure.com" ]; then
+      log_message "-e error expected value of logAnalyticsWorkspaceDomain  MUST opinsights.azure.com but actual value is ${logAnalyticsWorkspaceDomain}"
+      log_message ${contactUSMessage}
+      exit 1
+    fi
+  elif [ "$azureCloudName" = "azurechinacloud" ]; then
+    log_message "az cli configured cloud name:$azureCloudName"
+    if [ $logAnalyticsWorkspaceDomain = "opinsights.azure.cn" ]; then
+      log_message "-e error expected value of logAnalyticsWorkspaceDomain  MUST opinsights.azure.cn but actual value is ${logAnalyticsWorkspaceDomain}"
+      log_message ${contactUSMessage}
+      exit 1
+    fi
+  fi
+
+  workspaceSubscriptionId="$(echo ${logAnalyticsWorkspaceResourceID} | cut -d'/' -f3 | tr "[:upper:]" "[:lower:]")"
+  workspaceResourceGroup="$(echo ${logAnalyticsWorkspaceResourceID} | cut -d'/' -f5)"
+  workspaceName="$(echo ${logAnalyticsWorkspaceResourceID} | cut -d'/' -f9)"
+  log_message "workspaceSubscriptionId:${workspaceSubscriptionId} workspaceResourceGroup:${workspaceResourceGroup} workspaceName:${workspaceName}"
+
+  clusterSubscriptionId=${2}
+  # set the azure subscription to azure cli if the workspace in different sub than cluster
+  if [[ "$clusterSubscriptionId" != "$workspaceSubscriptionId" ]]; then
+    log_message "switch subscription id of workspace as active subscription for azure cli since workspace in different subscription than cluster: ${workspaceSubscriptionId}"
+    isClusterAndWorkspaceInSameSubscription=false
+    set_azure_subscription $workspaceSubscriptionId
+  fi
+  workspaceList=$(az resource list -g "$workspaceResourceGroup" -n "$workspaceName" --resource-type $workspaceResourceProvider)
+  log_message "workspace info:${workspaceList}"
+  if [ "$workspaceList" = "[]" ]; then
+     log_message "-e error workspace:${logAnalyticsWorkspaceResourceID} doesnt exist"
+     exit 1
+  fi
+
+  ciSolutionResourceName="ContainerInsights(${workspaceName})"
+  workspaceSolutionList=$(az resource list -g $workspaceResourceGroup -n $ciSolutionResourceName --resource-type $workspaceSolutionResourceProvider)
+  log_message "workspace solution info:${workspaceSolutionList}"
+  if [ "$workspaceSolutionList" = "[]" ]; then
+     log_message "-e error ContainerInsights solution on workspace:${logAnalyticsWorkspaceResourceID} doesnt exist"
+     exit 1
+  fi
+
+  privateLinkScopedResources=$(az resource show --ids ${logAnalyticsWorkspaceResourceID} --query properties.privateLinkScopedResources -o tsv | tr "[:upper:]" "[:lower:]" | tr -d "[:space:]")
+  log_message "workspace privateLinkScopedResources:${privateLinkScopedResources}"
+
+  publicNetworkAccessForIngestion=$(az resource show --ids ${logAnalyticsWorkspaceResourceID} --query properties.publicNetworkAccessForIngestion -o tsv | tr "[:upper:]" "[:lower:]" | tr -d "[:space:]")
+  log_message "workspace publicNetworkAccessForIngestion:${publicNetworkAccessForIngestion}"
+  if [ -z "$privateLinkScopedResources" ]; then
+    if [ "$publicNetworkAccessForIngestion" != "enabled" ]; then
+      log_message "-e error Unless private link configuration, publicNetworkAccessForIngestion MUST be enabled for data ingestion"
+      log_message ${workspacePrivateLinkMessage}
+      exit 1
+    fi
+  fi
+  publicNetworkAccessForQuery=$(az resource show --ids ${logAnalyticsWorkspaceResourceID} --query properties.publicNetworkAccessForQuery -o tsv | tr "[:upper:]" "[:lower:]" | tr -d "[:space:]")
+  log_message "workspace publicNetworkAccessForQuery:${publicNetworkAccessForQuery}"
+  if [ -z "$privateLinkScopedResources" ]; then
+    if [ "$publicNetworkAccessForQuery" != "enabled" ]; then
+      log_message "-e error Unless private link configuration, publicNetworkAccessForQuery MUST be enabled for data query"
+      log_message ${workspacePrivateLinkMessage}
+      exit 1
+    fi
+  fi
+
+  workspaceCappingDailyQuotaGb=$(az resource show --ids ${logAnalyticsWorkspaceResourceID} --query properties.workspaceCapping.dailyQuotaGb -o tsv  | tr -d "[:space:]")
+  log_message "workspaceCapping dailyQuotaGb:${workspaceCappingDailyQuotaGb}"
+  if [ "$workspaceCappingDailyQuotaGb" != "-1.0" ]; then
+    log_message "-e error workspace configured daily quota and verify ingestion data reaching over the quota:${workspaceCappingDailyQuotaGb}"
+    log_message ${dataCapHelpMessage}
+    exit 1
+  fi
+
+  workspaceId=$(az resource show --ids ${logAnalyticsWorkspaceResourceID} --query properties.customerId -o tsv | tr -d "[:space:]")
+  log_message "workspaceId: ${workspaceId}"
+
+  workspaceKey=$(az rest --method post --uri $logAnalyticsWorkspaceResourceID/sharedKeys?api-version=2015-11-01-preview --query primarySharedKey -o json)
+  workspacePrimarySharedKey=$(echo $workspaceKey | tr -d '"')
+
+  log_message "END:validate_ci_extension:SUCCESS"
+}
+
+validate_az_cli_installed_or_not() {
+  if command_exists az; then
+    log_message "detected azure cli installed"
+    azCLIVersion=$(az -v)
+    log_message "azure-cli version: ${azCLIVersion}"
+    azCLIExtension=$(az extension list --query "[?name=='k8s-extension'].name | [0]")
+    if [ "$azCLIExtension" = "k8s-extension" ]; then
+        azCLIExtensionVersion=$(az extension list --query "[?name=='k8s-extension'].version | [0]")
+        log_message "detected k8s-extension and current installed version: ${azCLIExtensionVersion}"
+        log_message "updating the k8s-extension version to latest available one"
+        az extension update --name 'k8s-extension'
+    else
+      log_message "adding k8s-extension since k8s-extension doesnt exist as installed"
+      az extension add --name 'k8s-extension'
+    fi
+    azCLIExtensionVersion=$(az extension list --query "[?name=='k8s-extension'].version | [0]")
+    log_message "current installed k8s-extension version: ${azCLIExtensionVersion}"
+  else
+    log_message "-e error azure cli doesnt exist as installed"
+    log_message ${azureCLIInstallLinkMessage}
+    exit 1
+  fi
+}
+
+validate_ci_agent_pods() {
+  log_message "START:validate_ci_agent_pods"
+  # verify the id and key of the workspace matches with workspace key value in the secret
+  wsID=$(kubectl get secrets ${agentK8sSecretName} -n ${agentK8sNamespace} -o json | jq -r ".data.WSID")
+  wsID=$(echo $wsID | base64 -d)
+  log_message "workspaceId: ${wsID} value in the ${agentK8sSecretName}"
+
+  wsKEY=$(kubectl get secrets ${agentK8sSecretName} -n ${agentK8sNamespace} -o json | jq -r ".data.KEY")
+  wsKEY=$(echo $wsKEY | base64 -d)
+
+  if [[ "$workspaceId" != "$wsID" ]]; then
+    log_message "-e error workspaceId: ${workspaceID} of the workspace doesnt match with workspaceId: ${wsID} value in the omsagent secret"
+    log_message $ciExtensionReOnboarding
+    exit 1
+  fi
+  if [[ "$workspacePrimarySharedKey" != "$wsKEY" ]]; then
+    log_message "-e error workspacePrimarySharedKey of the workspace doesnt match with workspacekey value value in the omsagent secret"
+    log_message $ciExtensionReOnboarding
+    exit 1
+  fi
+
+  # verify state of agent deployment
+  readyReplicas=$(kubectl get deployments -n ${agentK8sNamespace} ${agentK8sDeploymentName} -o json | jq '.status.readyReplicas')
+  log_message "number of deployment ready replicas:${readyReplicas}"
+  if [[ "$readyReplicas" != "1" ]]; then
+     log_message "-e error number of readyReplicas of agent deployment MUST be 1"
+     exit 1
+  fi
+  replicas=$(kubectl get deployments -n ${agentK8sNamespace} ${agentK8sDeploymentName} -o json | jq '.status.replicas')
+  log_message "number of deployment replicas:${replicas}"
+  if [[ "$replicas" != "1" ]]; then
+     log_message "-e error number of replicas of agent deployment MUST be 1"
+     exit 1
+  fi
+
+  # verify state of agent ds
+  currentNumberScheduled=$(kubectl get ds -n ${agentK8sNamespace} ${agentK8sLinuxDaemonsetName} -o json | jq '.status.currentNumberScheduled')
+  desiredNumberScheduled=$(kubectl get ds -n ${agentK8sNamespace} ${agentK8sLinuxDaemonsetName} -o json | jq '.status.desiredNumberScheduled')
+  log_message "number of linux deamonset pods currentNumberScheduled:${currentNumberScheduled} and currentNumberScheduled:${currentNumberScheduled}"
+  if [[ "$currentNumberScheduled" != "$desiredNumberScheduled" ]]; then
+     log_message "-e error desiredNumberScheduled: ${desiredNumberScheduled} doesnt match with currentNumberScheduled: ${currentNumberScheduled}"
+     log_message "-e error please fix the pod scheduling issues of omsagent daemonset pods in namespace: ${agentK8sNamespace}"
+     exit 1
+  fi
+
+  numberAvailable=$(kubectl get ds -n ${agentK8sNamespace} ${agentK8sLinuxDaemonsetName} -o json | jq '.status.numberAvailable')
+  log_message "number of linux deamonset pods numberAvailable:${numberAvailable}"
+  if [[ "$numberAvailable" != "$currentNumberScheduled" ]]; then
+     log_message "-e error numberAvailable: ${numberAvailable} doesnt match with currentNumberScheduled: ${currentNumberScheduled}"
+     log_message "-e error please fix the pod scheduling issues of omsagent daemonset pods in namespace: ${agentK8sNamespace}"
+     exit 1
+  fi
+  numberReady=$(kubectl get ds -n ${agentK8sNamespace} ${agentK8sLinuxDaemonsetName} -o json | jq '.status.numberReady')
+  log_message "number of linux deamonset pods numberReady:${numberReady}"
+  if [[ "$numberAvailable" != "$numberReady" ]]; then
+     log_message "-e error numberAvailable: ${numberAvailable} doesnt match with numberReady: ${numberReady}"
+     log_message "-e error please fix the pod scheduling issues of omsagent daemonset pods in namespace: ${agentK8sNamespace}"
+     exit 1
+  fi
+  log_message "END:validate_ci_agent_pods:SUCCESS"
+}
+
+validate_ci_agent_identity_status() {
+  log_message "START:validate_ci_agent_identity_status"
+  log_message "Info of ${agentArcK8sIdentityCRDName} in namespace ${azureArcK8sNamespace}"
+  kubectl get  azureclusteridentityrequests -n ${azureArcK8sNamespace} ${agentArcK8sIdentityCRDName} -o json >> $logFile
+  status=$(kubectl get  azureclusteridentityrequests -n ${azureArcK8sNamespace} ${agentArcK8sIdentityCRDName} -o json | jq -r '.status')
+  if [ -z "$status" ]; then
+     log_message "-e error status field empty for the CRD ${agentArcK8sIdentityCRDName} in namespace  ${azureArcK8sNamespace}"
+     log_message $timesyncHelpMessage
+     exit 1
+  fi
+  expirationTime=$(kubectl get  azureclusteridentityrequests -n ${azureArcK8sNamespace} ${agentArcK8sIdentityCRDName} -o json | jq -r '.status.expirationTime')
+  if [ -z "$expirationTime" ]; then
+     log_message "-e error expirationTime field empty for the CRD ${agentArcK8sIdentityCRDName} in namespace  ${azureArcK8sNamespace}"
+     log_message $timesyncHelpMessage
+     exit 1
+  fi
+  tokenReference=$(kubectl get  azureclusteridentityrequests -n ${azureArcK8sNamespace} ${agentArcK8sIdentityCRDName} -o json | jq -r '.status.tokenReference')
+  if [ -z "$tokenReference" ]; then
+     log_message "-e error tokenReference field empty for the CRD ${agentArcK8sIdentityCRDName} in namespace  ${azureArcK8sNamespace}"
+    log_message $timesyncHelpMessage
+     exit 1
+  fi
+  dataName=$(kubectl get  azureclusteridentityrequests -n ${azureArcK8sNamespace} ${agentArcK8sIdentityCRDName} -o json | jq -r '.status.tokenReference.dataName')
+  if [ -z "$dataName" ]; then
+     log_message "-e error dataName field of tokenReference empty for the CRD ${agentArcK8sIdentityCRDName} in namespace  ${azureArcK8sNamespace}"
+     log_message $timesyncHelpMessage
+     exit 1
+  fi
+  secretName=$(kubectl get  azureclusteridentityrequests -n ${azureArcK8sNamespace} ${agentArcK8sIdentityCRDName} -o json | jq -r '.status.tokenReference.secretName')
+  if [ -z "$secretName" ]; then
+     log_message "-e error secretName field of tokenReference empty for the CRD ${agentArcK8sIdentityCRDName} in namespace  ${azureArcK8sNamespace}"
+     log_message $timesyncHelpMessage
+     exit 1
+  fi
+  log_message "END:validate_ci_agent_identity_status:SUCCESS"
+}
+
+get_nodes_pods_crds_info() {
+  log_message "START:get_nodes_pods_crds_info"
+  log_message "nodes"
+  kubectl get nodes >> $logFile
+
+  log_message "kube-system pods"
+  kubectl get pods -n ${agentK8sNamespace} >> $logFile
+
+  log_message "azurearck8spods"
+  kubectl get pods -n ${azureArcK8sNamespace} >> $logFile
+
+  log_message "crds"
+  kubectl get crds -A >> $logFile
+
+  log_message "azureclusteridentityrequests crds"
+  kubectl get crds azureclusteridentityrequests.clusterconfig.azure.com >> $logFile
+  kubectl get azureclusteridentityrequests -n ${azureArcK8sNamespace}  >> $logFile
+
+  log_message "container-insights-clusteridentityrequest crd"
+  kubectl describe  azureclusteridentityrequests -n ${azureArcK8sNamespace} container-insights-clusteridentityrequest >> $logFile
+  log_message "END:get_nodes_pods_crds_info:SUCCESS"
+}
+
+datetime=$(date -u)
+log_message "*** Script Execution start @ ${datetime} ***"
+
+# verify azure cli installed or not
+validate_az_cli_installed_or_not
+
+# parse and validate args
+parse_args $@
+
+# parse cluster resource id
+clusterSubscriptionId="$(echo $clusterResourceId | cut -d'/' -f3 | tr "[:upper:]" "[:lower:]")"
+clusterResourceGroup="$(echo $clusterResourceId | cut -d'/' -f5)"
+providerName="$(echo $clusterResourceId | cut -d'/' -f7)"
+clusterName="$(echo $clusterResourceId | cut -d'/' -f9)"
+
+# get the current active azure cloud of the az cli
+azureCloudName=$(az cloud show --query name -o tsv | tr "[:upper:]" "[:lower:]" | tr -d "[:space:]")
+log_message "azure cloud name: ${azureCloudName}"
+
+# login to azure interactively
+login_to_azure
+
+# set the cluster subscription id as active sub for azure cli
+set_azure_subscription $clusterSubscriptionId
+
+# validate ci extension
+validate_ci_extension $azureCloudName $clusterSubscriptionId $clusterResourceGroup $clusterName
+
+# validate ci agent pods
+if command_exists kubectl; then
+   if command_exists jq; then
+       validate_ci_agent_pods
+   else
+     log_message "-e error jq doesnt exist as installed"
+     log_message $jqInstallLinkMessage
+     exit 1
+   fi
+else
+  log_message "-e error kubectl doesnt exist as installed"
+  log_message ${kubectlInstallLinkMessage}
+  exit 1
+fi
+
+# validate ci cluster identity token
+validate_ci_agent_identity_status
+
+# get nodes and pods status
+get_nodes_pods_crds_info
+
+log_message "Everything looks good according to this script."
+log_message $contactUSMessage