> ## Documentation Index
> Fetch the complete documentation index at: https://docs.coreweave.com/llms.txt
> Use this file to discover all available pages before exploring further.

# How does authentication work for private clusters?

Self-service CKS provisioning creates public clusters by default. Private clusters are configured by CoreWeave Support and reach the Kubernetes API server over Tailscale or Direct Connect, but authentication itself is unchanged: managed auth uses API access tokens, and unmanaged auth uses your own identity provider through OIDC, service-account tokens, or webhooks.

For full details, see [CKS authentication and access](/products/cks/auth-access/introduction). For the private-cluster network path, see [How do I access the Kubernetes API if my cluster is private?](/support/cks/articles/how-do-i-access-the-kubernetes-api-if-my-cluster-is-private).

***

<Badge stroke shape="pill" color="blue" size="md">[Authentication & Access](/support/cks/tags/authentication-access)</Badge>