This message was deleted.
# generala
adamant-kite-43734
11/26/2025, 2:31 AMThis message was deleted.
c
creamy-pencil-82913
11/26/2025, 2:36 AMcreamy-pencil-82913
11/26/2025, 2:36 AMAn authorized cluster endpoint (ACE) allows users to connect to the Kubernetes API server of a downstream cluster without having to route their requests through the Rancher authentication proxy.
creamy-pencil-82913
11/26/2025, 2:36 AMDo that
a
ancient-dinner-76338
11/26/2025, 2:52 AMThe RKE2 control plane nodes are using private IP, so I can’t run kubectl from my local machine. It only works when I run kubectl from the jumpserver that’s on the same network as the RKE2 node.
ancient-dinner-76338
11/26/2025, 2:55 AMWhat if I want to be able to use it from my local computer, but without going through the main Rancher domain?
c
creamy-pencil-82913
11/26/2025, 4:09 AMYou need direct connectivity to the nodes, via the some endpoint. Could be the node IPs, could be some external loadbalancer or something that you set up to port-forward to it. There is no way to tell it to just log in to a jump server or something like that.
creamy-pencil-82913
11/26/2025, 4:10 AMThe lack of connectivity you’re describing is why Rancher acts as a proxy. Why would you want to set up some other proxy or jump box when you already have Rancher doing it for you?
26 Views