localurl:/docs/administration/access-control/

-title:Audit

localurl:/docs/administration/audit/

-title:Codefreshplatform IPs

-title:CodefreshIP addresses

localurl:/docs/administration/platform-ip-addresses/

url:"/access-control"

-title:Audit

url:"/audit"

-title:Codefreshplatform IPs

-title:CodefreshIP addresses

url:"/platform-ip-addresses"

-title:What's New?

title:"CodefreshplatformIP addresses"

title:"Codefresh IP addresses"

description:""

group:administration

toc:true

To use Codefresh for[a Kubernetes cluster]({{site.baseurl}}/docs/deploy-to-kubernetes/add-kubernetes-cluster/) that has a strict firewall, you can only allow access to specific IP addresses used by the Codefresh platform. Using these IPs allows you to deploy to your cluster even when it is not accessible from the public internet.

Access to Kubernetes clusters behind strict firewalls not accessible from the public internet is governed through authorized IP addresses.

Codefresh provides a list of IP addresses to be configured on clusters to allow access to your cluster.

You can register multiple external clusters to Codefresh runtimes, both hosted and hybrid. All runtimes require Codefresh platform IPs to be configured on the clusters.

In addition, managed clusters registered to hosted runtimes must be configured with a set of specific IP addresses to authorize access.

All the IPs are NAT gateways, and therefore you only need to enable specific IPs instead of ranges.

All the IPs are NAT gateways, and need to enable specific IPs instead of ranges.

- 44.238.167.159

- 44.237.63.217

- 34.207.5.18

- 34.232.79.230

- 44.193.43.5

Clusters must be configured with API access to the authorized Codefresh IPs.

If you haven't configured your clusters with the required IPs, use the links below to complete the configuration for the clusters listed:

[AKS (Azure Kubernetes Service)](https://docs.microsoft.com/en-us/azure/aks/api-server-authorized-ip-ranges){:target="\_blank"}

[EKS (Amazon Elastic Container Service)](https://aws.amazon.com/premiumsupport/knowledge-center/eks-lock-api-access-IP-addresses/){:target="\_blank"}

[GKE (Google Kubernetes Engine)](https://cloud.google.com/kubernetes-engine/docs/how-to/private-clusters){:target="\_blank"}

[Hybrid runtime installation]({{site.baseurl}}/docs/runtime/installation/)

[Set up a hosted runtime]({{site.baseurl}}/docs/incubation/hosted-runtime/)

[Codefresh architecture]({{site.baseurl}}/docs/runtime/managed-cluster/)