|
1 | 1 | ---
|
2 | 2 | ms.service: azure-arc
|
3 | 3 | ms.topic: include
|
4 |
| -ms.date: 08/15/2023 |
| 4 | +ms.date: 09/28/2023 |
5 | 5 | ---
|
6 | 6 |
|
7 | 7 | ### [Azure Cloud](#tab/azure-cloud)
|
@@ -73,14 +73,15 @@ GET https://guestnotificationservice.azure.us/urls/allowlist?api-version=2020-01
|
73 | 73 | | ----------------- | ------------- |
|
74 | 74 | | `https://management.chinacloudapi.cn` | Required for the agent to connect to Azure and register the cluster. |
|
75 | 75 | | `https://<region>.dp.kubernetesconfiguration.azure.cn` | Data plane endpoint for the agent to push status and fetch configuration information. |
|
76 |
| -| `https://login.chinacloudapi.cn`<br/>`https://<region>.login.chinacloudapi.cn`<br/>`login.windows.net`| Required to fetch and update Azure Resource Manager tokens. | |
77 |
| -| `https://mcr.microsoft.com`<br/>`https://*.data.mcr.microsoft.com` | Required to pull container images for Azure Arc agents. | |
| 76 | +| `https://login.chinacloudapi.cn`<br/>`https://<region>.login.chinacloudapi.cn`<br/>`login.partner.microsoftonline.cn`| Required to fetch and update Azure Resource Manager tokens. | |
| 77 | +| `mcr.azk8s.cn` | Required to pull container images for Azure Arc agents. | |
78 | 78 | | `https://gbl.his.arc.azure.cn` | Required to get the regional endpoint for pulling system-assigned Managed Identity certificates. |
|
79 | 79 | | `https://*.his.arc.azure.cn` | Required to pull system-assigned Managed Identity certificates. |
|
80 | 80 | |`https://k8connecthelm.azureedge.net` | `az connectedk8s connect` uses Helm 3 to deploy Azure Arc agents on the Kubernetes cluster. This endpoint is needed for Helm client download to facilitate deployment of the agent helm chart. |
|
81 |
| -|`guestnotificationservice.azure.cn`<br/>`*.guestnotificationservice.azure.cn`<br/>`sts.windows.net`<br/>`https://k8sconnectcsp.azureedge.net` | For [Cluster Connect](../cluster-connect.md) and for [Custom Location](../custom-locations.md) based scenarios. | |
| 81 | +|`guestnotificationservice.azure.cn`<br/>`*.guestnotificationservice.azure.cn`<br/>`sts.chinacloudapi.cn`<br/>`https://k8sconnectcsp.azureedge.net` | For [Cluster Connect](../cluster-connect.md) and for [Custom Location](../custom-locations.md) based scenarios. | |
82 | 82 | |`*.servicebus.chinacloudapi.cn` | For [Cluster Connect](../cluster-connect.md) and for [Custom Location](../custom-locations.md) based scenarios. |
|
83 | 83 | |`https://graph.chinacloudapi.cn/` | Required when [Azure RBAC](../azure-rbac.md) is configured. |
|
84 |
| -| `*.arc.azure.net`| Required to manage connected clusters in Azure portal. | |
| 84 | +|`*.arc.azure.cn` | Required to manage connected clusters in Azure portal.| |
85 | 85 | |`https://<region>.obo.arc.azure.cn:8084/` | Required when [Cluster Connect](../cluster-connect.md) is configured. |
|
86 | 86 | |`dl.k8s.io`| Required when [automatic agent upgrade](../agent-upgrade.md#toggle-automatic-upgrade-on-or-off-when-connecting-a-cluster-to-azure-arc) is enabled. |
|
| 87 | +|`quay.azk8s.cn`<br/>`registryk8s.azk8s.cn`<br/>`k8sgcr.azk8s.cn`<br/>`usgcr.azk8s.cn`<br/>`dockerhub.azk8s.cn/<repo-name>/<image-name>:<version>`|Container registry proxy servers for Azure China VMs.| |
0 commit comments