> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aviatrix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Onboarding Kubernetes Clusters

> Onboard EKS, AKS, GKE, or self-managed Kubernetes clusters to the Aviatrix Controller for Distributed Cloud Firewall. Pick the cluster type to see the step-by-step flow.

Onboarding a Kubernetes cluster registers it with the Aviatrix Controller and
enables Distributed Cloud Firewall to discover Kubernetes workloads (namespaces,
services, pods, nodes, endpoint slices) and enforce policy on them via
SmartGroups.

## Before you start

Read

<a href={"/docs/enterprise/" + "10.1" + "/reference/dcf/kubernetes-prerequisites"}>Kubernetes Onboarding Prerequisites</a>
once. Each per-provider page below links back to the relevant anchors there
rather than restating the requirements.

## Private clusters

For clusters whose API server is not exposed to the public internet, set up
private connectivity first via

<a href={"/docs/enterprise/" + "10.1" + "/guides/security/dcf/private-kubernetes-cluster-onboard"}>Onboarding Private Kubernetes Clusters</a>
, then return to the per-provider page.

Pick the cluster type:

<CardGroup cols={2}>
  <Card
    title="Onboard EKS Clusters"
    icon="aws"
    href={
  "/docs/enterprise/" +
  "10.1" +
  "/guides/security/dcf/kubernetes-onboard-eks"
}
  >
    AWS-managed Kubernetes via the Aviatrix IAM principal or a service-account
    kubeconfig.
  </Card>

  <Card
    title="Onboard AKS Clusters"
    icon="microsoft"
    href={
  "/docs/enterprise/" +
  "10.1" +
  "/guides/security/dcf/kubernetes-onboard-aks"
}
  >
    Azure-managed Kubernetes via the Aviatrix service principal or a
    service-account kubeconfig.
  </Card>

  <Card
    title="Onboard GKE Clusters"
    icon="google"
    href={
  "/docs/enterprise/" +
  "10.1" +
  "/guides/security/dcf/kubernetes-onboard-gke"
}
  >
    Google-managed Kubernetes via Terraform with the GCP service account or a
    service-account kubeconfig.
  </Card>

  <Card
    title="Onboard Self-Managed/Custom"
    icon="server"
    href={
  "/docs/enterprise/" +
  "10.1" +
  "/guides/security/dcf/kubernetes-onboard-custom"
}
  >
    kops, kubeadm, k3s, Rancher, and other clusters running in a supported
    cloud, using a service-account kubeconfig.
  </Card>
</CardGroup>

## Related Topics

* <a href={"/docs/enterprise/" + "10.1" + "/concepts-architectures/components/dcf/kubernetes-overview"}>Aviatrix Kubernetes Firewall</a>
* <a href={"/docs/enterprise/" + "10.1" + "/guides/security/dcf/dcf-kubernetes"}>Distributed Cloud Firewall for Kubernetes</a>
* <a href={"/docs/enterprise/" + "10.1" + "/reference/dcf/kubernetes-snat"}>Disable SNAT for Kubernetes Workloads</a>
* <a href={"/docs/enterprise/" + "10.1" + "/guides/security/dcf/kubernetes-resource-discovery"}>Discovery of Kubernetes Resources</a>