Skip to content

Commit b3ca1c2

Browse files
committed
Updates regarding Arc enabled clusters
1 parent abbec8f commit b3ca1c2

File tree

1 file changed

+23
-0
lines changed

1 file changed

+23
-0
lines changed

articles/azure-monitor/containers/container-insights-enable-arc-enabled-clusters.md

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -114,10 +114,29 @@ az k8s-extension create --name azuremonitor-containers --cluster-name <cluster-n
114114

115115
To use [managed identity authentication](container-insights-onboard.md#authentication), add the `configuration-settings` parameter as in the following:
116116

117+
>[!NOTE]
118+
>Managed identity authentication is not supported for Arc k8s connected clusters with **ARO**.
119+
>
120+
117121
```azurecli
118122
az k8s-extension create --name azuremonitor-containers --cluster-name <cluster-name> --resource-group <resource-group> --cluster-type connectedClusters --extension-type Microsoft.AzureMonitor.Containers --configuration-settings amalogs.useAADAuth=true
119123
```
120124

125+
To create extension instance on **Arc K8S connected clusters with ARO**, you can use the commands below that does not use managed identity. Non-cli onboarding is not supported for Arc K8s connected clusters with **ARO**. Currently, only k8s-extension version 1.3.7 or below is supported.
126+
127+
If you are using k8s-extension version above 1.3.7, downgrade the version
128+
129+
```azurecli
130+
az extension remove --name k8s-extension
131+
az extension add --name k8s-extension --version 1.3.7
132+
```
133+
134+
Install the extension with **amalogs.useAADAuth=false**
135+
136+
```azurecli
137+
az k8s-extension create --name azuremonitor-containers --cluster-name <cluster-name> --resource-group <resource-group> --cluster-type connectedClusters --extension-type Microsoft.AzureMonitor.Containers --configuration-settings amalogs.useAADAuth=false
138+
```
139+
121140

122141
### Option 2 - With existing Azure Log Analytics workspace
123142

@@ -228,6 +247,10 @@ az k8s-extension show --name azuremonitor-containers --cluster-name <cluster-nam
228247
## Migrate to managed identity authentication
229248
Use the flowing guidance to migrate an existing extension instance to managed identity authentication.
230249

250+
>[!NOTE]
251+
>Managed identity authentication is not supported for Arc k8s connected clusters with **ARO**.
252+
>
253+
231254
## [CLI](#tab/migrate-cli)
232255
First retrieve the Log Analytics workspace configured for Container insights extension.
233256

0 commit comments

Comments
 (0)