Skip to content

Enable private clusters

Read the Private clusters section under Networking to understand what private clusters are and how they fit into the overall architecture.

Before you can enable private clusters in SKE, ensure your setup meets the following requirements:

  • Your project must be part of an SNA before you can set cluster accessScope: "SNA".
  • Routing tables must be enabled for your SNA.
  • A public DNS server must be used for the network that your SKE cluster is deployed in.

Currently, private clusters can only be enabled via CLI:

  1. Generate and fetch a basic cluster configuration using the STACKIT CLI.

  2. Modify the following part of the configuration to enable the private cluster feature:

    {
    "network": {
    ...
    "controlPlane": {
    "accessScope": "SNA"
    }
    }
    }
  3. Use the following command to create a private SKE cluster using the modified configuration:

    Terminal window
    stackit ske cluster create -p <PROJECT_ID> <CLUSTER_NAME> --payload @cluster-configuration.json

You can now utilize your private SKE cluster.