[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC)：2025-08-29。"],[],[],null,["# Apigee Connect\n\nThis section describes using Apigee Connect for communication between the hybrid management\nplane and the MART service in the runtime plane.\n\nIntroduction\n------------\n\nApigee Connect allows the Apigee hybrid management plane to connect securely to the MART service in\nthe runtime plane without requiring you to expose the MART endpoint on the internet. If you use\nApigee Connect, you do not need to configure the MART ingress gateway with a host alias and an\nauthorized DNS certificate.\n\nConfiguring Apigee connect\n--------------------------\n\n\nConfigure Apigee connect in your overrides with the [`connectAgent`](/apigee/docs/hybrid/v1.15/config-prop-ref#connectagent) configuration property.\n\n### Service account\n\n\nApigee connect uses the [`apigee-mart`](/apigee/docs/hybrid/v1.15/mart-service-account) service account. This service account requires the Apigee Connect Agent `roles/apigeeconnect.Agent` role. See [Service accounts and roles used by hybrid components](/apigee/docs/hybrid/v1.15/sa-about#recommended-sas).\n\n\nUse the [`connectAgent.serviceAccountPath`](/apigee/docs/hybrid/v1.15/config-prop-ref#connectagent-serviceaccountpath) or [`connectAgent.serviceAccountRef`](/apigee/docs/hybrid/v1.15/config-prop-ref#connectagent-serviceaccountref) configuration properties to specify the `apigee-mart` service account key. Alternatively you can [store the service account key in Hashicorp Vault](/apigee/docs/hybrid/v1.15/storing-sa-keys-in-vault).\n\n### API\n\n\nApigee Connect requires the **Apigee Connect API** in the [Google Cloud API Library](/apigee/docs/hybrid/v1.15/cloud.google.com/endpoints/docs/openapi/enable-api). For instructions on enabling APIs in the Google Cloud console, see [Step 3: Enable APIs](/apigee/docs/hybrid/v1.15/precog-enableapi).\n\n### Applying Apigee connect configuration\n\n\nApply changes to the Apigee connect configuration with the `apigee-org` chart with the following command: \n\n```\nhelm upgrade ORG_NAME apigee-org/ \\\n --namespace apigee \\\n --atomic \\\n -f OVERRIDES_FILE.yaml\n```\n| **Note:** If you see an error saying `Error: UPGRADE FAILED: \"`*ORG_NAME*`\" has no deployed releases`, replace `upgrade` with `install` and try the command again.\n\n### Image\n\n\nApigee connect uses the `gcr.io/apigee-release/hybrid/apigee-connect-agent:1.15.0` image. If you want to use a private image repository, see [Use a private image repository with Apigee hybrid](/apigee/docs/hybrid/v1.15/container-images).\n\nChecking Apigee connect logs\n----------------------------\n\n\nCheck the Apigee Connect Agent log. \n\n```\nkubectl logs -n namespace apigee-connect-agent-pod-name\n```\n\nThe Apigee Connect Agent reports the following log categories: \n\nFor help on viewing audit logs in Apigee hybrid see [Audit logging information](/apigee/docs/hybrid/v1.15/audit-logging-info).\n\nYou can set the level of logging with the [`connectAgent.logLevel`](/apigee/docs/hybrid/v1.15/config-prop-ref#connectagent-loglevel) configuration property."]]
