What is Azure Arc-enabled Kubernetes?
With Azure Arc-enabled Kubernetes, you can attach and configure Kubernetes clusters located either inside or outside Azure. When you connect a Kubernetes cluster to Azure Arc, it will:
- Appear in the Azure portal with an Azure Resource Manager ID and a managed identity.
- Be placed in an Azure subscription and resource group.
- Receive tags just like any other Azure resource.
To connect a Kubernetes cluster to Azure, the cluster administrator needs to deploy agents. These agents:
- Run in the
azure-arcKubernetes namespace as standard Kubernetes deployments.
- Handle connectivity to Azure.
- Collect Azure Arc logs and metrics.
- Watch for configuration requests.
Azure Arc-enabled Kubernetes supports industry-standard SSL to secure data in transit. Also, data at rest is stored encrypted in an Azure Cosmos DB database to ensure data confidentiality.
Supported Kubernetes distributions
Azure Arc-enabled Kubernetes works with any Cloud Native Computing Foundation (CNCF) certified Kubernetes clusters. The Azure Arc team has worked with key industry partners to validate conformance of their Kubernetes distributions with Azure Arc-enabled Kubernetes.
Azure Arc-enabled Kubernetes supports the following scenarios:
Connect Kubernetes running outside of Azure for inventory, grouping, and tagging.
Deploy applications and apply configuration using GitOps-based configuration management.
View and monitor your clusters using Azure Monitor for containers.
Enforce threat protection using Azure Defender for Kubernetes.
Apply policy definitions using Azure Policy for Kubernetes.
This service supports Azure Lighthouse, which lets service providers sign in to their own tenant to manage subscriptions and resource groups that customers have delegated.
Learn how to connect a cluster to Azure Arc.