> For the complete documentation index, see [llms.txt](https://docs.ozone.one/ozone-end-user-guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ozone.one/ozone-end-user-guide/documentation/settings/private-cluster-management.md).

# Private Cluster Management

To facilitate secure DevOps on private clusters, Ozone provides a secure tunnel for communications between the private cluster and Ozone agents, without being exposed externally and with no hassles over working with firewalls.

It leverages Open Ziti as a provider for a private tunnel which helps establish a secure channel to enable managing deployments to private clusters.

In order to attach a private cluster, head over to the cluster view screen from the resources menu.

<figure><img src="https://3829750647-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAObcOkMb6sCSnSdcUOTm%2Fuploads%2F3cTEzTWImbFaQQHdON5V%2FScreenshot%202023-02-21%20at%2011.51.51%20AM-20230309-080453.png?alt=media&amp;token=23226648-fc56-4135-9847-f636d7f2e74d" alt=""><figcaption></figcaption></figure>

Enter the name of the cluster, the environment to which the cluster maps to, and the features that need to be enabled for this cluster:

<figure><img src="https://3829750647-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAObcOkMb6sCSnSdcUOTm%2Fuploads%2FAyDatESguZpcI7bfA70i%2FScreenshot%202023-06-05%20at%203.32.02%20PM-20230605-100213.png?alt=media&amp;token=dee622e0-b30f-431c-ac30-8e1335b21411" alt=""><figcaption></figcaption></figure>

In the next screen, select the cluster type. Currently, Ozone supports the following cluster types: AKS, GKE, Openshift, TKG, EKS, PKS, and a generic K8s cluster for local instances. Select “Yes” to ensure the setup is for a private cluster.

<figure><img src="https://3829750647-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAObcOkMb6sCSnSdcUOTm%2Fuploads%2Fpmiq2sYcw1b5ygroSyZN%2Fimage-20230605-101239.png?alt=media&amp;token=79c4d5e4-956f-4655-b06a-0b5edb119710" alt=""><figcaption></figcaption></figure>

Once you confirm that it is a private cluster, you will see another pop-up window where you are required to enter the name of the provider and an IP address, as part of configuring a new edge router provider. Ozone uses Netfoundry’s Open Ziti to create the private tunnel.

<figure><img src="https://3829750647-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAObcOkMb6sCSnSdcUOTm%2Fuploads%2FipGi4AkOoPwsH9rLnIK9%2Fimage-20230605-113218.png?alt=media&amp;token=a2e10151-82af-427d-a748-8c5894399da3" alt=""><figcaption></figcaption></figure>

Once you hit “Submit”, a shell file is downloaded onto your system. Copy the command and run it in your VM to install Ziti.

<figure><img src="https://3829750647-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAObcOkMb6sCSnSdcUOTm%2Fuploads%2FWqrUvXFqC3oaOuk1ewid%2Fimage-20230605-113737.png?alt=media&amp;token=c6319112-79db-4ddd-b14e-fba16822cd42" alt=""><figcaption></figcaption></figure>

Download the tunnel config json file once Ziti has finished installing, come back to Ozone, and close the pop-up shown above. You will need to setup the private cluster by adding a public and task registry prefix, selecting the edge router, and finally uploading the tunnel config file:

<figure><img src="https://3829750647-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FAObcOkMb6sCSnSdcUOTm%2Fuploads%2FEw645AtJPXQQ4VNMep8m%2Fimage-20230605-114520.png?alt=media&amp;token=7d51d5d2-0073-4fd1-b464-07766ec1949a" alt=""><figcaption></figcaption></figure>

Clicking on “Download File” will give you the YAML that you will need to run on your cluster along with a kubectl command to install Ozone agents. After successful installation, you can find your new private cluster attached in the cluster view screen.