> ## Documentation Index > Fetch the complete documentation index at: https://docs.coreweave.com/llms.txt > Use this file to discover all available pages before exploring further. # Get cluster > Fetch a single CoreWeave CKS cluster by its unique ID. * The API server is `https://api.coreweave.com`. * Replace `{API_ACCESS_TOKEN}` with your [CoreWeave API access token](/security/authn-authz/manage-api-access-tokens). * For required permissions, see [IAM Access Policies](/security/iam/access-policies). Substitute `{id}` with the cluster ID returned from List clusters or Create cluster. ```bash title="Example request" theme={"system"} curl -X GET https://api.coreweave.com/v1beta1/cks/clusters/{id} \ -H "Content-Type: application/json" \ -H "Authorization: Bearer {API_ACCESS_TOKEN}" ``` ## OpenAPI ````yaml /openapi/cks/openapi.yaml get /v1beta1/cks/clusters/{id} openapi: 3.0.3 info: title: CoreWeave Kubernetes Service API version: 0.0.1 description: >- The CKS API lets you create, list, get, update, and delete managed Kubernetes clusters on CoreWeave infrastructure. servers: - url: https://api.coreweave.com description: CoreWeave production API. security: - bearerAuth: [] tags: - name: ClusterService description: >- Endpoints for creating, listing, getting, updating, and deleting CoreWeave CKS clusters. paths: /v1beta1/cks/clusters/{id}: get: tags: - ClusterService summary: Get cluster description: Retrieves a single CKS cluster by ID. operationId: ClusterService_GetCluster parameters: - name: id in: path description: The ID of the cluster to get. required: true schema: type: string responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/GetClusterResponse' default: description: Default error response content: application/json: schema: $ref: '#/components/schemas/Status' components: schemas: GetClusterResponse: type: object properties: cluster: description: The cluster. allOf: - $ref: '#/components/schemas/Cluster' Status: description: >- Standard error response. `code` is a [`google.rpc.Code`](https://cloud.google.com/apis/design/errors#error_codes); `message` is human-readable English; `details` carries machine-readable error details when present. type: object properties: code: description: >- The status code, which should be an enum value of [google.rpc.Code][google.rpc.Code]. type: integer format: int32 message: description: >- A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the [google.rpc.Status.details][google.rpc.Status.details] field, or localized by the client. type: string details: description: >- A list of messages that carry the error details. There is a common set of message types for APIs to use. type: array items: $ref: '#/components/schemas/GoogleProtobufAny' Cluster: description: A managed Kubernetes cluster running on CoreWeave infrastructure. type: object properties: id: description: The unique identifier for the cluster, assigned by the server. type: string readOnly: true name: description: >- The name of the cluster. Must be 1–30 characters and match the regex `^[a-z0-9]([-a-z0-9]*[a-z0-9])?$` (lowercase alphanumeric and hyphens; cannot start or end with a hyphen). Immutable once set. type: string zone: description: >- The [Availability Zone](https://docs.coreweave.com/platform/regions/about-regions-and-azs#complete-region-list) in which the cluster is located. Immutable once set. type: string vpcId: description: >- The ID of the VPC in which the cluster is located. The VPC must be in the same Availability Zone as the cluster. Immutable once set. type: string public: description: >- Whether the cluster's api-server is publicly accessible from the Internet. type: boolean version: description: >- The version of Kubernetes to run on the cluster, in minor version format (for example, `v1.32`). Patch versions are applied automatically by CKS as they are released. type: string network: description: The Kubernetes overlay network configuration for the cluster. allOf: - $ref: '#/components/schemas/ClusterNetworkConfig' oidc: description: >- OpenID Connect (OIDC) configuration for authentication to the api-server. allOf: - $ref: '#/components/schemas/OIDCConfig' authzWebhook: description: Authorization webhook configuration for the cluster. allOf: - $ref: '#/components/schemas/AuthWebhookConfig' authnWebhook: description: Authentication webhook configuration for the cluster. allOf: - $ref: '#/components/schemas/AuthWebhookConfig' auditPolicy: description: >- Audit policy for the cluster. Must be provided as a base64-encoded JSON or YAML string. type: string apiServerEndpoint: description: The endpoint for the cluster's api-server. type: string readOnly: true createdAt: description: The time the cluster was created. type: string format: date-time readOnly: true updatedAt: description: The time the cluster was last updated. type: string format: date-time readOnly: true isUpgradeable: description: >- Whether self-serve Kubernetes upgrades are currently supported for the cluster. type: boolean readOnly: true disableOidcInfoPublication: description: >- When `true`, suppresses publication of the `/.well-known/openid-configuration` and `/openid/v1/jwks` endpoints to `oidc.cks.coreweave.com/id/[CLUSTER-ID]`, so the cluster cannot be used as a public OIDC provider. Publishing these endpoints exposes the cluster's OIDC configuration and JWKS to the public Internet. type: boolean kubelet: description: >- A JSON object of selective overrides applied to every cluster Node's kubelet configuration. A Node reboot is required for changes to take effect. Unknown options are stored but ignored. See the [Kubernetes kubelet configuration reference](https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/) for supported options. type: object additionalServerSans: description: >- Up to 10 additional Subject Alternative Names to include on the Kubernetes API server certificate. Each entry must be unique. type: array items: type: string tailscale: description: Tailscale configuration for the cluster. allOf: - $ref: '#/components/schemas/Tailscale' status: description: The current status of the cluster. type: string readOnly: true required: - name - zone - vpcId - version - network GoogleProtobufAny: description: >- Contains an arbitrary serialized message along with a @type that describes the type of the serialized message. type: object properties: '@type': description: The type of the serialized message. type: string additionalProperties: true ClusterNetworkConfig: description: >- The Kubernetes overlay network configuration for a cluster, including pod, service, and internal load balancer CIDR ranges. type: object properties: podCidrName: description: >- The name of the VPC prefix to use as the pod CIDR range. The prefix must exist in the cluster's VPC. type: string serviceCidrName: description: >- The name of the VPC prefix to use as the service CIDR range. The prefix must exist in the cluster's VPC. type: string internalLbCidrNames: description: >- The names of the VPC prefixes to use as internal load balancer CIDR ranges. Internal load balancers are reachable within the VPC but not accessible from the Internet. The prefixes must exist in the cluster's VPC. This field is append-only. type: array items: type: string serviceNodePortRange: description: The range of ports to use for NodePort services. allOf: - $ref: '#/components/schemas/PortRange' required: - podCidrName - serviceCidrName - internalLbCidrNames OIDCConfig: description: >- OpenID Connect (OIDC) configuration for authentication to the cluster's api-server. The whole object is optional on the cluster, but when supplied, `issuerUrl` and `clientId` are required within it. type: object properties: issuerUrl: description: >- The URL of the OIDC issuer. Required when `oidc` is configured on a cluster. type: string clientId: description: >- The client ID for the OIDC client. Required when `oidc` is configured on a cluster. type: string usernameClaim: description: The claim to use as the username. type: string usernamePrefix: description: The prefix to apply to the username. type: string groupsClaim: description: The claim to use as the groups. type: string groupsPrefix: description: The prefix to apply to the groups. type: string ca: description: >- The CA certificate for the OIDC issuer. Must be a base64-encoded PEM-encoded certificate. type: string requiredClaim: description: >- A claim that must be present on every token for authentication to succeed. type: string adminGroupBinding: description: >- Optional OIDC group name to bind to the cluster-admin RBAC role in the cluster. type: string signingAlgorithms: description: >- A list of signing algorithms that the OpenID Connect discovery endpoint uses. type: array items: type: string required: - issuerUrl - clientId AuthWebhookConfig: description: >- Configuration for an authentication or authorization webhook server used by the cluster's api-server. Each webhook (`authzWebhook`, `authnWebhook`) is optional on the cluster, but when supplied, `server` is required within it. type: object properties: server: description: >- The URL of the webhook server. Required when the webhook is configured on a cluster. type: string ca: description: >- The CA certificate for the webhook server. Must be a base64-encoded PEM-encoded certificate. type: string required: - server Tailscale: description: Tailscale configuration for a cluster. type: object properties: clientId: description: Tailscale OAuth client ID. Maximum 255 characters. type: string tailnetDomain: description: The Tailscale tailnet DNS name assigned to this cluster. type: string readOnly: true PortRange: description: >- An inclusive port range. `end` must be greater than or equal to `start`, and both must be in `1–65535`. type: object properties: start: description: The start of the range, inclusive. Must be between 1 and 65535. type: integer format: int32 end: description: >- The end of the range, inclusive. Must be greater than or equal to `start` and at most 65535. type: integer format: int32 required: - start - end securitySchemes: bearerAuth: type: http scheme: bearer bearerFormat: JWT description: CoreWeave API access token sent as a bearer token. x-default: Bearer {API_ACCESS_TOKEN} ````