Stay organized with collections
Save and categorize content based on your preferences.
This page describes how to configure connectivity for the kubectl command-line
tool to access Google Distributed Cloud connected.
By default, the ToR switches automatically advertise the virtual IP addresses of your
local control plane nodes to your local network. You can use the kubectl tool to directly
connect to those virtual IP addresses from your local network.
For situations where direct access to your local network is not available, you have
the following options:
If the local control plane node uses a public IP address, you can connect to it directly
from the internet. Your network administrator must configure your firewall to allow inbound
traffic to the node on port 443.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-29 UTC."],[[["\u003cp\u003eThis page details how to configure \u003ccode\u003ekubectl\u003c/code\u003e for access to Google Distributed Cloud connected.\u003c/p\u003e\n"],["\u003cp\u003eBy default, ToR switches advertise the virtual IP addresses of local control plane nodes, enabling direct \u003ccode\u003ekubectl\u003c/code\u003e connections.\u003c/p\u003e\n"],["\u003cp\u003eIf a local control plane node has a public IP, direct internet access is possible, provided the firewall permits inbound traffic on port 443.\u003c/p\u003e\n"],["\u003cp\u003eIf a local control plane node uses a private IP, a bastion host needs to be configured for access.\u003c/p\u003e\n"]]],[],null,["# Configure kubectl connectivity\n\nThis page describes how to configure connectivity for the `kubectl` command-line\ntool to access Google Distributed Cloud connected.\n\nBy default, the ToR switches automatically advertise the virtual IP addresses of your\nlocal control plane nodes to your local network. You can use the `kubectl` tool to directly\nconnect to those virtual IP addresses from your local network.\n\nFor situations where direct access to your local network is not available, you have\nthe following options:\n\n- If the local control plane node uses a public IP address, you can connect to it directly from the internet. Your network administrator must configure your firewall to allow inbound traffic to the node on port 443.\n- If the local control plane uses a private IP address, you must [Configure a bastion host](/distributed-cloud/edge/latest/docs/bastion).\n\nWhat's next\n-----------\n\n- [Manage virtual machines](/distributed-cloud/edge/latest/docs/virtual-machines)\n- [Deploy workloads](/distributed-cloud/edge/latest/docs/deploy)\n- [Manage machines](/distributed-cloud/edge/latest/docs/machines)\n- [Manage clusters](/distributed-cloud/edge/latest/docs/clusters)"]]
