Skip to content

Commit 446ea91

Browse files
Update transparent proxy description
1 parent 6c63d0e commit 446ea91

File tree

1 file changed

+19
-18
lines changed

1 file changed

+19
-18
lines changed

articles/azure-arc/kubernetes/quickstart-connect-cluster.md

Lines changed: 19 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -255,24 +255,6 @@ eastus AzureArcTest1 microsoft.kubernetes/connectedclusters
255255

256256
---
257257

258-
## Connect a cluster with custom certificate
259-
260-
If you need the outbound communication from Arc agents to authenticate via a certificate, pass the certificate during onboarding. In case you need to pass multiple certificates, combine them into a single certificate chain and pass it through.
261-
262-
### [Azure CLI](#tab/azure-cli)
263-
264-
Run the connect command with parameters specified:
265-
266-
```azurecli
267-
az connectedk8s connect --name <cluster-name> --resource-group <resource-group> --proxy-cert <path-to-cert-file>
268-
```
269-
270-
### [Azure PowerShell](#tab/azure-powershell)
271-
272-
This scenario is not supported via the powershell cmdlet.
273-
274-
---
275-
276258
## Connect using an outbound proxy server
277259

278260
If your cluster is behind an outbound proxy server, requests must be routed via the outbound proxy server.
@@ -317,6 +299,25 @@ If your cluster is behind an outbound proxy server, requests must be routed via
317299

318300
---
319301

302+
## Connect a cluster using a transparent outbound proxy server
303+
304+
For outbound proxy servers where only a trusted certificate needs to be provided without the proxy server endpoint inputs, `az connectedk8s connect` can be run with just the `--proxy-cert` input specified. In case multiple trusted certificates are expected,they can be combined into a single certificate chain and passed through.
305+
306+
### [Azure CLI](#tab/azure-cli)
307+
308+
Run the connect command with the `--proxy-cert` parameter specified:
309+
310+
```azurecli
311+
az connectedk8s connect --name <cluster-name> --resource-group <resource-group> --proxy-cert <path-to-cert-file>
312+
```
313+
314+
### [Azure PowerShell](#tab/azure-powershell)
315+
316+
The ability to pass only in the proxy certificate without the proxy server endpoint details is not yet supported via PowerShell.
317+
318+
---
319+
320+
320321
## Verify cluster connection
321322

322323
Run the following command:

0 commit comments

Comments
 (0)