You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
description: This article provides guidance for actions to take when you can't connect to Azure Fleet Manager.
4
-
ms.date: 01/13/2026
5
-
ms.author: jarrettr
2
+
title: Can't connect to Azure Kubernetes Fleet Manager hub cluster
3
+
description: This article provides guidance for actions to take when you can't connect to an Azure Kubernetes Fleet Manager hub cluster.
4
+
ms.date: 01/29/2026
5
+
ms.author: simonwaight
6
6
ms.reviewer: chiragpa, v-ryanberg
7
7
ms.service: azure-kubernetes-fleet-manager
8
8
ms.custom: sap:Other issue or questions related to Fleet manager
9
9
---
10
-
# Unable to connect to Azure Fleet Manager
10
+
# Unable to connect to Azure Kubernetes Fleet Manager hub cluster
11
11
12
-
This article helps you resolve an issue that prevents you from connecting to Azure Fleet Manager.
12
+
This article helps you resolve an issue preventing you from connecting to an Azure Kubernetes Fleet Manager hub cluster via `kubectl`.
13
13
14
14
## Symptoms
15
15
16
-
You try to connect to Azure Fleet Manager by retrieving the kubeconfig file for the Fleet Manager hub cluster. You initially run the following command:
16
+
You try to connect to an Azure Kubernetes Fleet Manager's hub cluster using credentials obtained using the following command:
17
17
18
-
```powershell
19
-
az fleet get-credentials --resource-group \${GROUP} --name
18
+
```azurecli-interactive
19
+
az fleet get-credentials \
20
+
--resource-group rg-contoso-01 \
21
+
--name flt-contoso-01
20
22
```
21
23
22
-
Then, you run the following command:
23
-
24
-
```powershell
25
-
kubectl get pods
26
-
```
27
-
28
-
On the Fleet Manager API server, you're prompted to enter a device code in another browser to authenticate your identity.
24
+
When attempting to call any API on the Fleet Manager hub cluster via `kubectl`, you're prompted to enter a device code to authenticate.
29
25
30
26
If your organization enforces Conditional Access policies that block device code flows, you might receive a message that resembles the following message:
31
27
@@ -37,14 +33,14 @@ The following screenshot shows an example of this kind of message.
37
33
38
34
## Cause
39
35
40
-
The kubeconfig file that's generated by the `az fleet get-credentials` command defaults to device code authentication. Conditional Access policies can block this flow and prevent access to the Fleet Manager API server.
36
+
The kubeconfig file that's generated by the `az fleet get-credentials` command defaults to device code authentication. Conditional Access policies can block this flow and prevent access to the Fleet Manager hub cluster.
41
37
42
38
## Resolution
43
39
44
-
To resolve this issue, modify kubeconfig to use Azure CLI authentication instead of device code authentication. To make this change, run the following command:
40
+
To resolve this issue, modify using the following command to modify your kubeconfig to use Azure CLI authentication instead of device code authentication:
45
41
46
-
```powershell
42
+
```bash
47
43
kubelogin convert-kubeconfig -l azurecli
48
44
```
49
45
50
-
This command updates the kubeconfig file so that it authenticates by using your existing Azure CLI sign-in session. This action bypasses the device code prompt.
46
+
Now, when using `kubectl`your existing Azure sign-in session will be used, or a non-device flow will be initiated if you aren't already authenticated.
0 commit comments