All 29 Multi-cluster questions
More in Multi-cluster
What are the architectural models for multi-cluster ArgoCD (hub-spoke vs per-cluster)? How are cluster credentials secured in ArgoCD? How do you target a subset of clusters (e.g., only production)? How do cluster labels help manage a fleet? How do you deploy region-specific configuration to clusters? What is the difference between targeting a cluster by server URL vs name? How do you onboard a new cluster into an existing GitOps setup? How do you deploy different app versions to different clusters (e.g., staged rollout)? How do you view aggregated application status across clusters? Can you run ArgoCD per cluster instead of a central hub, and why?
Advertisement
Back to results for “Connectivity”
ArgoCD › Multi-cluster

What connectivity does the hub need to spoke clusters?

Intermediate

Answer

The hub's application controller must reach each spoke's Kubernetes API endpoint over the network with valid credentials. Firewalls, VPNs/peering, and private endpoints must permit this. If a spoke API is unreachable, its apps show Unknown and can't sync until connectivity is restored.
Real-world example A misconfigured security group blocks the hub from a spoke's API, so its apps go Unknown until the rule is fixed.

Common follow-ups: What happens if a spoke API is unreachable? | What network paths are needed?

Applications Sync & Health Multi-cluster
All 29 Multi-cluster questions