Skip to content

Commit 87d63b6

Browse files
Merge pull request #2005 from sjwaight/fix-fleet-connect-doc
Tidy up auth TSG
2 parents 5f3ef06 + b63d178 commit 87d63b6

2 files changed

Lines changed: 17 additions & 21 deletions

File tree

support/azure/kubernetes-fleet/toc.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
items:
22
- name: Welcome
33
href: welcome-azure-kubernetes-fleet.yml
4-
- name: Unable to connect to Azure Fleet Manager
4+
- name: Unable to connect to Azure Kubernetes Fleet Manager
55
href: unable-connect-azure-fleet-manager.md
66
- name: Cluster Resource Placement
77

Lines changed: 16 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -1,31 +1,27 @@
11
---
2-
title: Can't connect to Azure Fleet Manager
3-
description: This article provides guidance for actions to take when you can't connect to Azure Fleet Manager.
4-
ms.date: 01/13/2026
5-
ms.author: jarrettr
2+
title: Can't connect to Azure Kubernetes Fleet Manager hub cluster
3+
description: This article provides guidance for actions to take when you can't connect to an Azure Kubernetes Fleet Manager hub cluster.
4+
ms.date: 01/29/2026
5+
ms.author: simonwaight
66
ms.reviewer: chiragpa, v-ryanberg
77
ms.service: azure-kubernetes-fleet-manager
88
ms.custom: sap:Other issue or questions related to Fleet manager
99
---
10-
# Unable to connect to Azure Fleet Manager
10+
# Unable to connect to Azure Kubernetes Fleet Manager hub cluster
1111

12-
This article helps you resolve an issue that prevents you from connecting to Azure Fleet Manager.
12+
This article helps you resolve an issue preventing you from connecting to an Azure Kubernetes Fleet Manager hub cluster via `kubectl`.
1313

1414
## Symptoms
1515

16-
You try to connect to Azure Fleet Manager by retrieving the kubeconfig file for the Fleet Manager hub cluster. You initially run the following command: 
16+
You try to connect to an Azure Kubernetes Fleet Manager's hub cluster using credentials obtained using the following command: 
1717

18-
```powershell
19-
az fleet get-credentials --resource-group \${GROUP} --name
18+
```azurecli-interactive
19+
az fleet get-credentials \
20+
--resource-group rg-contoso-01 \
21+
--name flt-contoso-01
2022
```
2123

22-
Then, you run the following command:
23-
24-
```powershell
25-
kubectl get pods
26-
```
27-
28-
On the Fleet Manager API server, you're prompted to enter a device code in another browser to authenticate your identity.
24+
When attempting to call any API on the Fleet Manager hub cluster via `kubectl`, you're prompted to enter a device code to authenticate.
2925

3026
If your organization enforces Conditional Access policies that block device code flows, you might receive a message that resembles the following message:
3127

@@ -37,14 +33,14 @@ The following screenshot shows an example of this kind of message.
3733

3834
## Cause
3935

40-
The kubeconfig file that's generated by the `az fleet get-credentials` command defaults to device code authentication. Conditional Access policies can block this flow and prevent access to the Fleet Manager API server.
36+
The kubeconfig file that's generated by the `az fleet get-credentials` command defaults to device code authentication. Conditional Access policies can block this flow and prevent access to the Fleet Manager hub cluster.
4137

4238
## Resolution
4339

44-
To resolve this issue, modify kubeconfig to use Azure CLI authentication instead of device code authentication. To make this change, run the following command:
40+
To resolve this issue, modify using the following command to modify your kubeconfig to use Azure CLI authentication instead of device code authentication:
4541

46-
```powershell
42+
```bash
4743
kubelogin convert-kubeconfig -l azurecli
4844
```
4945

50-
This command updates the kubeconfig file so that it authenticates by using your existing Azure CLI sign-in session. This action bypasses the device code prompt.
46+
Now, when using `kubectl` your existing Azure sign-in session will be used, or a non-device flow will be initiated if you aren't already authenticated.

0 commit comments

Comments
 (0)