// Module included in the following assemblies:
//
// * osd_cluster_admin/osd_private_connections/private-cluster.adoc

:_mod-docs-content-type: PROCEDURE
[id="enable-private-cluster-existing_{context}"]
= Enable an existing cluster to be private

[role="_abstract"]
Configure an existing public cluster to be private by restricting Application Programming Interface (API) endpoint access to private connections only. This enhances security by preventing public internet access to your cluster's control plane.

.Prerequisites

* The following private connections are configured to allow private access:
** Virtual Private Cloud (VPC) Peering
** Cloud VPN
** DirectConnect (AWS only)
** TransitGateway (AWS only)
** Cloud Interconnect ({gcp-short} only)

.Procedure

. Log in to {cluster-manager-url}.

. Select the public cluster you want to make private.

. On the *Networking* tab, select *Make API private* under *Control Plane API endpoint*.
+

[WARNING]
====
When set to *Private*, you cannot access your cluster unless you have configured the private connections in your cloud provider as outlined in the prerequisites.
====

. Click *Change settings*.
+
[NOTE]
====
Transitioning your cluster between private and public can take several minutes to complete.
====
