关联集群时， Google Cloud 会安装由 Google Cloud管理的多个 Pod。这些 Pod 必须调度到您的节点上。确保集群上的任何污点都不会阻止调度。如果您有此类污点，则集群注册会失败，并且您可能会看到类似于以下内容的错误：
1 node(s) had untolerated taint {CriticalAddOnsOnly: true}
网络要求
由于关联集群需要支持 Google Cloud 服务，因此您需要修改集群的出站防火墙规则，以允许其访问以下网域。这是您需要对集群进行的唯一更改，以便安装和运行 GKE 关联集群。
地址
用途
.gcr.io
从 Artifact Registry 中拉取映像。
gkeconnect.googleapis.com
建立用于接收 Google Cloud 请求的渠道并发出响应。
gkemulticloud.googleapis.com
将 Google 或第三方凭证换成 Google Cloud 资源的短期访问令牌。如果您的集群是使用 Google Cloud 区域注册到舰队，则需要将 REGION-gkemulticloud.googleapis.com（例如 us-central1-gkemulticloud.googleapis.com）列入许可清单。
[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC)：2025-08-06。"],[],[],null,["# Prerequisites for your AKS attached cluster\n\nTo operate as a GKE attached cluster, your cluster needs to have\nthe following characteristics.\n\n### AKS (Azure) cluster requirements\n\n- Ensure that you use a [supported platform version](/kubernetes-engine/multi-cloud/docs/attached/aks/reference/supported-versions). The\n cluster Kubernetes major.minor version should match the selected platform\n version. You can also list all supported versions using the following command:\n\n gcloud container attached get-server-config \\\n --location=\u003cvar translate=\"no\"\u003eGOOGLE_CLOUD_REGION\u003c/var\u003e\n\n Replace \u003cvar translate=\"no\"\u003eGOOGLE_CLOUD_REGION\u003c/var\u003e with the name of the\n Google Cloud location to administer your cluster from.\n- Ensure that the `kubectl` command-line tool is installed on your local machine\n and configured to access your cluster. This includes setting up the correct\n user credentials in the `kubeconfig` file.\n\n- Ensure that there is network connectivity to your cluster.\n\n- When you attach a cluster, Google Cloud installs several Pods that are\n managed by Google Cloud. These Pods must be scheduled on your nodes. Make\n sure that any taints on your cluster don't prevent scheduling. If you have\n such taints, your cluster registration fails and you might see an error\n similar to the following:\n\n 1 node(s) had untolerated taint {CriticalAddOnsOnly: true}\n\nNetworking requirements\n-----------------------\n\nBecause attached clusters rely on supporting Google Cloud services, you need to\nmodify your cluster's outbound firewall rules to allow it\naccess to the following domains. This is the only change you need to make to\nyour cluster to install and run GKE attached clusters.\n\n### Logging and monitoring\n\nTo use logging and monitoring features, your cluster also needs to\nbe able to access the following URLs: \n\n logging.googleapis.com\n monitoring.googleapis.com\n opsconfigmonitoring.googleapis.com\n kubernetesmetadata.googleapis.com\n\nGoogle Cloud requirements\n-------------------------\n\nBefore attaching your cluster to the Google Cloud management service, you must\ninstall the gcloud CLI, including the Google Cloud CLI command, and\ngrant access to your Google Cloud account to the Google Cloud management\nservice so it can manage your attached cluster resources.\n\n1. Check your gcloud CLI installation with the following command:\n\n gcloud version\n\n2. If the gcloud CLI isn't installed, or if its version is earlier than\n version 412.0.0, install version 412.0.0 or higher by following the\n [gcloud CLI installation instructions](/sdk/docs/install).\n\n3. Install the `kubectl`\n [additional component](/sdk/docs/components#additional_components).\n\n4. If you haven't already done so,\n [create your Google Cloud project](/resource-manager/docs/creating-managing-projects#creating_a_project).\n This will generate a Google Cloud project ID and a project number.\n\n5. Set your active Google Cloud project and authenticate your account with\n the following commands.\n\n export PROJECT_ID=\u003cyour project id\u003e\n gcloud auth login\n gcloud config set project $PROJECT_ID\n gcloud auth application-default login\n\n6. Enable the GKE attached clusters API and its required services with\n the following commands:\n\n gcloud services enable gkemulticloud.googleapis.com\n gcloud services enable gkeconnect.googleapis.com\n gcloud services enable connectgateway.googleapis.com\n gcloud services enable cloudresourcemanager.googleapis.com\n gcloud services enable anthos.googleapis.com\n gcloud services enable logging.googleapis.com\n gcloud services enable monitoring.googleapis.com\n gcloud services enable opsconfigmonitoring.googleapis.com\n gcloud services enable kubernetesmetadata.googleapis.com"]]
