You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
description: This article provides guidance for when you’re unable to connect to Azure Fleet Manager.
2
+
title: Can't connect to Azure Fleet Manager
3
+
description: This article provides guidance for actions to take when you can't connect to Azure Fleet Manager.
4
4
ms.date: 01/13/2026
5
5
ms.author: jarrettr
6
6
ms.reviewer: chiragpa, v-ryanberg
@@ -9,46 +9,42 @@ ms.custom: sap:Other issue or questions related to Fleet manager
9
9
---
10
10
# Unable to connect to Azure Fleet Manager
11
11
12
-
This article provides guidance for when you’re unable to connect to Azure Fleet Manager.
12
+
This article helps you resolve an issue that prevents you from connecting to Azure Fleet Manager.
13
13
14
14
## Symptoms
15
15
16
-
You try to connect to Azure Fleet Manager by retrieving the kubeconfig file for the Fleet Manager hub cluster. You initially run this command:
16
+
You try to connect to Azure Fleet Manager by retrieving the kubeconfig file for the Fleet Manager hub cluster. You initially run the following command:
17
17
18
18
```powershell
19
-
20
19
az fleet get-credentials --resource-group \${GROUP} --name
21
-
22
20
```
23
21
24
-
You then run this command:
22
+
Then, you run the following command:
25
23
26
24
```powershell
27
-
28
25
kubectl get pods
29
-
30
26
```
31
27
32
-
On the Fleet Manager API server, you see a prompt asking you to enter a device code in another browser to authenticate.
28
+
On the Fleet Manager API server, you're prompted to enter a device code in another browser to authenticate your identity.
33
29
34
-
If your organization enforces Conditional Access policies that block device code flows, you might see something like the following message: “Your sign-in was successful but does not meet the criteria to access this resource. For example, you might be signing in from a browser, app, location, or an authentication flow that is restricted by your admin.”
30
+
If your organization enforces Conditional Access policies that block device code flows, you might receive a message that resembles the following message:
35
31
36
-
The following is an example of such a message:
32
+
> Your sign-in was successful but does not meet the criteria to access this resource. For example, you might be signing in from a browser, app, location, or an authentication flow that is restricted by your admin.
33
+
34
+
The following screenshot shows an example of this kind of message.
The kubeconfig generated by `az fleet get-credentials` defaults to device code authentication. Conditional Access policies can block this flow, preventing access to the Fleet Manager API server.
40
+
The kubeconfig file that's generated by the `az fleet get-credentials`command defaults to device code authentication. Conditional Access policies can block this flow and prevent access to the Fleet Manager API server.
43
41
44
42
## Resolution
45
43
46
-
Convert the kubeconfig to use Azure CLI authentication instead of device code authentication with the following command:
44
+
To resolve this issue, modify kubeconfig to use Azure CLI authentication instead of device code authentication. To make this change, run the following command:
47
45
48
46
```powershell
49
-
50
47
kubelogin convert-kubeconfig -l azurecli
51
-
52
48
```
53
49
54
-
This updates the kubeconfig so that it authenticates using your existing Azure CLI sign-in session, bypassing the device code prompt.
50
+
This command updates the kubeconfig file so that it authenticates by using your existing Azure CLI sign-in session. This action bypasses the device code prompt.
0 commit comments