be-endpoint</code> are either <code>PUBLIC_ENDPOINT</code> or <code>PRIVATE_ENDPOINT</code>.
You may also need to configure an SSH tunnel via a <a href=https://docs.oracle.com/en-us/iaas/Content/ContEng/Tasks/contengdownloadkubeconfigfile.htm#localdownload>bastion host</a> to
access clusters that only have a private endpoint.</p><p>Replace <code>cluster-ocid</code> with the <a href=https://docs.oracle.com/en-us/iaas/Content/GSG/Concepts/concepts.htm>OCID</a> of the target OKE cluster.</p><h2 id=verify-acces