Configure API access

The Kubernetes API listens on TCP port 6443. Open that port on the control-plane security group, then download kubeconfig.

To open port 6443

  1. On the cluster detail page, open the control-plane security group.
  2. Choose Edit.
  3. Choose Add inbound rule.
  4. For the port, enter 6443. For the source, enter your CIDR.
  5. Choose Save and wait until Status is Ready.

To download kubeconfig

  1. Confirm cluster Status is Ready.
  2. Choose Download kubeconfig.
  3. Save the file (for example, ~/.kube/mystack.yaml).

Connect with kubectl

export KUBECONFIG=~/.kube/mystack.yaml
kubectl get nodes
kubectl get --raw=/readyz
Note For MySQL or PostgreSQL datastores, control-plane nodes must reach the database port through the security group selected at create time.