No resources displayed for Azure Arc Kubernetes in Azure portal (Error 599)

Question

Hi,

I've build a K3s cluster on-premises (k3s version v1.28.7+k3s1), then connected it to Azure with Azure Arc.

Everything in the setup was ok using Microsoft documentation.

Now, for the details of what is ok:

• I see the cluster in the Azure portal as a Azure Arc Kubernetes, the status is "connected"
• I have azurepolicy and microsoft.azuredefender.kubernetes extensions installed
• All pods are running in the azure-arc namespace of my cluster
• There are recommendations in Defender for Cloud for the asset, such as "Kubernetes clusters should not use the default namespace" for which kube resources in the default namespace are detailed
• I have successfully tested cluster-connect feature

So, everything seems right.

That being said, on my Azure Arc resource in the Azure portal, when I select whatever page under the left menu "Kubernetes resources (preview)" (cf. https://learn.microsoft.com/en-us/azure/azure-arc/kubernetes/kubernetes-resource-view#view-kubernetes-resources) I get an error:

Error (599)
Unable to reach the api server or api server is too busy to respond. {"message":"NetworkError when attempting to fetch resource.","stack":"","isError":true}

So, my kube cluster is connected to Azure, Defender for Cloud identifies kubernetes resources and namespaces and so on, but I cannot visualize these resources in the Azure portal.

Same behavior with RKE2 (version v1.30.7+rke2r1)

Did I miss something? Something to fix in the Azure side?

Answer 1

Hi @kbastoon ,

Welcome to Microsoft Q&A Forum, thank you for posting your query here!

It looks like it is an Access issue

To access the Kubernetes resources, you need access to the AKS cluster, Kubernetes API, and Kubernetes objects. Make sure you're either a cluster administrator or a user with the appropriate permissions to access the AKS cluster. For more information,

User also should have Azure Arc Kubernetes Viewer/Admin role as given in the below screenshot

Enable resource view:

You might need to enable the Kubernetes resource view for existing clusters refer below link

Refer: https://learn.microsoft.com/en-us/azure/aks/kubernetes-portal?tabs=azure-cli#enable-resource-view

Here are two articles that support the statements mentioned above.

refer:
https://learn.microsoft.com/en-us/azure/azure-arc/kubernetes/azure-rbac?tabs=kubernetes-latest#built-in-roles
https://learn.microsoft.com/en-us/azure/aks/kubernetes-portal?tabs=azure-cli

 

let us know if any help, we will always help as you needed.!

Please do not forget to "Accept the answer” wherever the information provided helps you, this can be beneficial to other community members.