使用英语阅读

通过

针对已启用 Azure Arc 的 Kubernetes 的 Azure Resource Graph 示例查询

  • 2025/06/23

Azure Resource Graph 是一项 Azure 服务，可用于大规模查询，帮助你有效地管理环境。 查询是使用 Kusto 查询语言 （KQL） 创建的。 有关详细信息，请参阅 了解 Azure Resource Graph 查询语言。

本页提供了已启用 Azure Arc 的 Kubernetes 的示例 Azure Resource Graph 查询列表。 可以通过 Azure PowerShell 或 Azure CLI 或在 Azure 门户中使用 Resource Graph 资源管理器运行这些查询。 可以随意修改查询以满足你的需求。

示例查询

列出所有已启用 Azure Arc 的 Kubernetes 资源

返回每个已启用 Azure Arc 的 Kubernetes 群集和每个群集的相关元数据的列表。

Resources
| project id, subscriptionId, location, type, properties.agentVersion, properties.kubernetesVersion, properties.distribution, properties.infrastructure, properties.totalNodeCount, properties.totalCoreCount
| where type =~ 'Microsoft.Kubernetes/connectedClusters'

az graph query -q "Resources | project id, subscriptionId, location, type, properties.agentVersion, properties.kubernetesVersion, properties.distribution, properties.infrastructure, properties.totalNodeCount, properties.totalCoreCount | where type =~ 'Microsoft.Kubernetes/connectedClusters'"

列出所有具有 Azure Monitor 扩展的已启用 Azure Arc 的 Kubernetes 群集

返回每个已启用 Azure Arc 的 Kubernetes 群集（安装有 Azure Monitor 扩展）的已连接的群集 ID。

KubernetesConfigurationResources
| where type == 'microsoft.kubernetesconfiguration/extensions'
| where properties.ExtensionType  == 'microsoft.azuremonitor.containers'
| parse id with connectedClusterId '/providers/Microsoft.KubernetesConfiguration/Extensions' *
| project connectedClusterId

az graph query -q "KubernetesConfigurationResources | where type == 'microsoft.kubernetesconfiguration/extensions' | where properties.ExtensionType == 'microsoft.azuremonitor.containers' | parse id with connectedClusterId '/providers/Microsoft.KubernetesConfiguration/Extensions' * | project connectedClusterId"

列出所有没有 Azure Monitor 扩展的已启用 Azure Arc 的 Kubernetes 群集

返回每个已启用 Azure Arc 的 Kubernetes 群集（缺少 Azure Monitor 扩展）的已连接群集 ID。

Resources
| where type =~ 'Microsoft.Kubernetes/connectedClusters' | extend connectedClusterId = tolower(id) | project connectedClusterId
| join kind = leftouter
  (KubernetesConfigurationResources
  | where type == 'microsoft.kubernetesconfiguration/extensions'
  | where properties.ExtensionType  == 'microsoft.azuremonitor.containers'
  | parse tolower(id) with connectedClusterId '/providers/microsoft.kubernetesconfiguration/extensions' *
  | project connectedClusterId
)  on connectedClusterId
| where connectedClusterId1 == ''
| project connectedClusterId

az graph query -q "Resources | where type =~ 'Microsoft.Kubernetes/connectedClusters' | extend connectedClusterId = tolower(id) | project connectedClusterId | join kind = leftouter (KubernetesConfigurationResources | where type == 'microsoft.kubernetesconfiguration/extensions' | where properties.ExtensionType == 'microsoft.azuremonitor.containers' | parse tolower(id) with connectedClusterId '/providers/microsoft.kubernetesconfiguration/extensions' * | project connectedClusterId ) on connectedClusterId | where connectedClusterId1 == '' | project connectedClusterId"

列出包含 Flux 配置的所有群集

返回至少包含一个 connectedCluster 的群集的 managedCluster 和 fluxConfiguration ID。

resources
| where type =~ 'Microsoft.Kubernetes/connectedClusters' or type =~ 'Microsoft.ContainerService/managedClusters' | extend clusterId = tolower(id) | project clusterId
| join
( kubernetesconfigurationresources
| where type == 'microsoft.kubernetesconfiguration/fluxconfigurations'
| parse tolower(id) with clusterId '/providers/microsoft.kubernetesconfiguration/fluxconfigurations' *
| project clusterId
) on clusterId
| project clusterId

az graph query -q "resources | where type =~ 'Microsoft.Kubernetes/connectedClusters' or type =~ 'Microsoft.ContainerService/managedClusters' | extend clusterId = tolower(id) | project clusterId | join ( kubernetesconfigurationresources | where type == 'microsoft.kubernetesconfiguration/fluxconfigurations' | parse tolower(id) with clusterId '/providers/microsoft.kubernetesconfiguration/fluxconfigurations' * | project clusterId ) on clusterId | project clusterId"

列出所有处于不合规状态的 Flux 配置

返回无法同步群集上资源的配置的 fluxConfiguration ID。

kubernetesconfigurationresources
| where type == 'microsoft.kubernetesconfiguration/fluxconfigurations'
| where properties.complianceState == 'Non-Compliant'
| project id

az graph query -q "kubernetesconfigurationresources | where type == 'microsoft.kubernetesconfiguration/fluxconfigurations' | where properties.complianceState == 'Non-Compliant' | project id"

后续步骤