Skip to content

Commit 315831e

Browse files
authored
Merge pull request #197279 from shashankbarsin/main
Update transparent proxy description
2 parents 5927c73 + 2f17d07 commit 315831e

File tree

1 file changed

+16
-18
lines changed

1 file changed

+16
-18
lines changed

articles/azure-arc/kubernetes/quickstart-connect-cluster.md

Lines changed: 16 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -255,24 +255,6 @@ eastus AzureArcTest1 microsoft.kubernetes/connectedclusters
255255

256256
---
257257

258-
## Connect a cluster with custom certificate
259-
260-
If you need the outbound communication from Arc agents to authenticate via a certificate, pass the certificate during onboarding. In case you need to pass multiple certificates, combine them into a single certificate chain and pass it through.
261-
262-
### [Azure CLI](#tab/azure-cli)
263-
264-
Run the connect command with parameters specified:
265-
266-
```azurecli
267-
az connectedk8s connect --name <cluster-name> --resource-group <resource-group> --proxy-cert <path-to-cert-file>
268-
```
269-
270-
### [Azure PowerShell](#tab/azure-powershell)
271-
272-
This scenario is not supported via the powershell cmdlet.
273-
274-
---
275-
276258
## Connect using an outbound proxy server
277259

278260
If your cluster is behind an outbound proxy server, requests must be routed via the outbound proxy server.
@@ -317,6 +299,22 @@ If your cluster is behind an outbound proxy server, requests must be routed via
317299

318300
---
319301

302+
For outbound proxy servers where only a trusted certificate needs to be provided without the proxy server endpoint inputs, `az connectedk8s connect` can be run with just the `--proxy-cert` input specified. In case multiple trusted certificates are expected, the combined certificate chain can be provided in a single file using the `--proxy-cert` parameter.
303+
304+
### [Azure CLI](#tab/azure-cli)
305+
306+
Run the connect command with the `--proxy-cert` parameter specified:
307+
308+
```azurecli
309+
az connectedk8s connect --name <cluster-name> --resource-group <resource-group> --proxy-cert <path-to-cert-file>
310+
```
311+
312+
### [Azure PowerShell](#tab/azure-powershell)
313+
314+
The ability to pass in the proxy certificate only without the proxy server endpoint details is not yet supported via PowerShell.
315+
316+
---
317+
320318
## Verify cluster connection
321319

322320
Run the following command:

0 commit comments

Comments
 (0)