# Overview

Existing brownfield Kubernetes clusters or clusters provisioned using the customer's existing process can be imported into the controller using a "GUI based Wizard" in the Web Console OR "Fully Automated and Embedded" into a pipeline. Once successfully imported, the controller will

- Provide visibility and monitoring into all aspects of the Kubernetes cluster.
- Provide users with secure KubeCTL access to the cluster.
- Manage the lifecycle of workloads on "imported clusters".

Did you know ?

Import Cluster Lifecycle can be managed through various methods:

- [UI](https://docs.rafay.co/clusters/import/wizard/#start-import)
- [CLI](https://docs.rafay.co/clusters/import/cli/)
- [Terraform](https://registry.terraform.io/providers/RafaySystems/rafay/latest/docs/resources/import_cluster)

## Import Process

Users can import existing clusters into their Orgs by deploying the Kubernetes management operator on the clusters. This can be performed either via "kubectl" or "helm".

The image below describes the typical steps that are performed in a sequence to successfully import a cluster into the Controller.

Management Operator  
Cluster Controller  
Admin  
Management Operator  
Cluster Controller  
Admin  
Generate CSR (with unique token)  
Verify token and Sign CSR  
Only accept connections with valid client certificate  
Download "bootstrap.yaml"  
apply "bootstrap.yaml"  
Provision/Import Cluster (unique token)  
Start Management Operator  
Send CSR  
Send Signed Certificate  
Establish long running mTLS connection  
Uses secure connection for cluster operations