Azure Arc Diagnostic

src/connectedk8s/TroubleshootTemplates/diagnoser_job.yaml

@@ -0,0 +1,52 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: azure-arc-troubleshoot
+  namespace: default
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  namespace: default
+  name: secret-reader
+rules:
+- apiGroups: [""] # "" indicates the core API group
+  resources: ["secrets"]
+  verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: read-pods
+  namespace: default
+subjects:
+# You can specify more than one "subject"
+- kind: ServiceAccount
+  name: azure-arc-troubleshoot
+  namespace: default
+roleRef:
+  kind: Role #this must be Role or ClusterRole
+  name: secret-reader # this must match the name of the Role or ClusterRole you wish to bind to
+  namespace: default
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: diagnosercontainer
+  namespace: default
+  labels:
+    app: networktest
+spec:
+  template:
+    metadata:
+      labels:
+        app: networktest
+    spec:
+      serviceAccountName: azure-arc-troubleshoot
+      containers: 
+      - name: networktest1
+        image: svacr1.azurecr.io/networktest:6.0
+        namespace: default
+      restartPolicy: Never
+  backoffLimit: 4
+

src/connectedk8s/azext_connectedk8s/_help.py

@@ -121,3 +121,11 @@
   - name: Disable multiple features.
     text: az connectedk8s disable-features -n clusterName -g resourceGroupName --features custom-locations azure-rbac
 """
+
+helps['connectedk8s troubleshoot'] = """
+  type: command
+  short-summary: Perform diagnostic check on the arc-enabled kubernetes cluster.
+  examples:
+  - name: Executes diagnostic checks on a connected kubernetes cluster
+    text: az connectedk8s troubleshoot -n clusterName -g resourceGroupName
+"""

src/connectedk8s/azext_connectedk8s/_params.py

@@ -20,6 +20,17 @@
 
 def load_arguments(self, _):
 
+    with self.argument_context('connectedk8s troubleshoot') as c:
+        c.argument('tags', tags_type)
+        c.argument('location', arg_type=get_location_type(self.cli_ctx), validator=get_default_location_from_resource_group)
+        c.argument('cluster_name', options_list=['--name', '-n'], help='The name of the connected cluster.')
+        c.argument('kube_config', options_list=['--kube-config'], help='Path to the kube config file.')
+        c.argument('kube_context', options_list=['--kube-context'], help='Kubconfig context from current machine.')
+        c.argument('https_proxy', options_list=['--proxy-https'], arg_group='Proxy', help='Https proxy URL to be used.')
+        c.argument('http_proxy', options_list=['--proxy-http'], arg_group='Proxy', help='Http proxy URL to be used.')
+        c.argument('no_proxy', options_list=['--proxy-skip-range'], arg_group='Proxy', help='List of URLs/CIDRs for which proxy should not to be used.')
+        c.argument('proxy_cert', options_list=['--proxy-cert'], arg_group='Proxy', type=file_type, completer=FilesCompleter(), help='Path to the certificate file for proxy')
+
     with self.argument_context('connectedk8s connect') as c:
         c.argument('tags', tags_type)
         c.argument('location', arg_type=get_location_type(self.cli_ctx), validator=get_default_location_from_resource_group)