diff --git a/bcs-services/bcs-cluster-manager/internal/tunnel/tunnelserver.go b/bcs-services/bcs-cluster-manager/internal/tunnel/tunnelserver.go
index e2a929247a..f23d938d9e 100644
--- a/bcs-services/bcs-cluster-manager/internal/tunnel/tunnelserver.go
+++ b/bcs-services/bcs-cluster-manager/internal/tunnel/tunnelserver.go
@@ -165,5 +165,7 @@ func (wts *WsTunnelServerCallback) authorizeTunnel(req *http.Request) (string, b
 
 // clean credential
 func (wts *WsTunnelServerCallback) cleanCredential(serverKey string) {
-	wts.model.DeleteClusterCredential(context.TODO(), serverKey)
+	// when multiple kube-agent connect to cluster-manager with same clientKey,
+	// delete credential will make connection unusable
+	// wts.model.DeleteClusterCredential(context.TODO(), serverKey)
 }