Public Endpoint Mode (Development)

terraform
# tfvars for public endpoint access
provision_bastion       = false
endpoint_public_access  = true
# kubernetes_api_host is NOT needed - auto-detected from kubeconfig

# Required: CIDRs allowed to access K8s API (port 6443)
control_plane_allowed_cidrs = [
  "198.51.100.0/24",   # Your office IP range
  "203.0.113.0/24"     # VPN range
]

Terraform usage with public endpoint:

shell
# No tunnel needed - direct access
terraform apply -var-file=single-<region>.tfvars