Access clusters

Download the kubeconfig and Talos config for a cluster, verify access with kubectl, and use the web terminal.

Once a cluster's status is Provisioned, you can download its kubeconfig for kubectl access, download its Talos client config, or open a terminal directly in the console.

Download the kubeconfig

  1. Go to KubernetesClusters and open the cluster.
  2. In the cluster header, open the Download config menu and select Kubeconfig. The menu is disabled until the cluster is Provisioned.
  3. In the dialog, optionally enter an API Server Address — a host or host:port that is reachable from where you will run kubectl (for example my-cluster.example.com:6443). Leave it empty to use the internal cluster IP, which is reachable from within your project network (for example, from an instance attached to the same network). Whether an external address exists for your cluster depends on your deployment — ask your administrator.
  4. The file downloads as <cluster>-kubeconfig.yaml.

Protect the kubeconfig

The downloaded kubeconfig carries cluster-admin credentials. There are no per-user Kubernetes accounts and no token expiry: anyone with access to the project can download the same full-admin kubeconfig. Treat the file as a secret — do not commit it to version control or share it outside the project team. See Access control for how project access is granted.

Verify access with kubectl

export KUBECONFIG=./my-cluster-kubeconfig.yaml

# Nodes should be Ready
kubectl get nodes -o wide

# System pods should be Running
kubectl get pods -A

# Confirm the server version
kubectl version

If kubectl times out, check that the API server address in the kubeconfig is reachable from your machine (see step 3 above), or run the smoke test from an instance inside the cluster's network.

Download the Talos config

Cluster nodes run Talos Linux, which has no SSH — node-level inspection uses the talosctl client instead. To get the client configuration:

  1. Open the Download config menu and select Talosconfig.
  2. Optionally enter an Endpoint Address reachable from your machine; leave it empty to use the internal address.
  3. The file downloads as <cluster>-talosconfig.yaml.

Like the kubeconfig, the Talos config grants privileged access to the nodes — protect it the same way. See the Talos documentation for talosctl usage.

Use the web terminal

The cluster's Terminal tab runs k9s — a terminal UI for Kubernetes — in your browser, connected to the cluster with admin credentials. No local setup is required.

  1. Open the cluster and select the Terminal tab (available once the cluster is Provisioned).
  2. Navigate resources in k9s; type : followed by a resource name (for example :pods) to switch views.

The terminal has Reconnect and Fullscreen controls. The same terminal is used for virtual machine consoles and database psql sessions.