---
title: "Get cluster firewall"
method: GET
path: "/api/v1/k8s/clusters/{cluster_id}/firewall"
tags: ["Kubernetes"]
---

# Get cluster firewall

`GET /api/v1/k8s/clusters/{cluster_id}/firewall`

The security group protecting the cluster's public gateway, and the account's security groups available to assign.

## Path parameters

- `cluster_id` string, required

## Headers

- `X-Project-ID` string, uuid, required

## Response `200`

Firewall state

- K8sFirewallState
  - `success` boolean
  - `enabled` boolean
  - `default_name` string — Platform baseline security group
  - `assigned_sg_id` string, uuid — Custom security group currently assigned (absent when on the baseline)
  - `assigned_name` string
  - `available` object[] — Your security groups that can be assigned
    - `id` string, uuid
    - `name` string
    - `inbound_rules` integer
    - `outbound_rules` integer

## Other responses

- `404` — Resource not found

## Changes

- **2026-08-23** `72c803a128b2` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/rafftechnologies/apis/raff-api/changes/api/v1/k8s/clusters/:cluster_id/firewall/get.md)

---

[API](https://skmtc.dev/rafftechnologies/apis/raff-api.md) · [All operations](https://skmtc.dev/rafftechnologies/apis/raff-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/rafftechnologies/raff-api/revisions/2f4df56be77c/schema)