From dd3d3e95e2d67f09969b867b5382a7bab34c8647 Mon Sep 17 00:00:00 2001
From: Radu Malliu <26001154+radu-malliu@users.noreply.github.com>
Date: Mon, 22 Dec 2025 12:04:29 -0800
Subject: [PATCH 1/2] feat(docs): add warning for public attribute of cks
 cluster resource

---
 docs/resources/cks_cluster.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docs/resources/cks_cluster.md b/docs/resources/cks_cluster.md
index 7a8c10b4..cb497151 100644
--- a/docs/resources/cks_cluster.md
+++ b/docs/resources/cks_cluster.md
@@ -87,6 +87,7 @@ The prefixes must exist in the cluster's VPC. This field is append-only.
 - `node_port_range` (Attributes) Kubernetes Service NodePort range. NodePort range can be expanded in existing clusters but not shrunk. Updating the NodePort range to a smaller range will require a replacement of the cluster. (see [below for nested schema](#nestedatt--node_port_range))
 - `oidc` (Attributes) OpenID Connect (OIDC) configuration for authentication to the api-server. (see [below for nested schema](#nestedatt--oidc))
 - `public` (Boolean) Whether the cluster's api-server is publicly accessible from the internet.
+  > WARNING: Do not set this attribute to `false` at cluster creation. Additional setup is required before a cluster can be made private. Check with your CoreWeave account team for details.
 - `shared_storage_cluster_id` (String) The `cluster_id` of the cluster to share storage with. Must be enabled by CoreWeave suppport. Contact CoreWeave support if you are interested in this feature.
 
 ### Read-Only

From 445ba852d767f993c13a9df03804c30b6bdeb961 Mon Sep 17 00:00:00 2001
From: Radu Malliu <26001154+radu-malliu@users.noreply.github.com>
Date: Thu, 15 Jan 2026 14:42:10 -0800
Subject: [PATCH 2/2] fix(docs): generate docs the right way

---
 coreweave/cks/resource_cluster.go | 2 +-
 docs/resources/cks_cluster.md     | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/coreweave/cks/resource_cluster.go b/coreweave/cks/resource_cluster.go
index de805d56..77825491 100644
--- a/coreweave/cks/resource_cluster.go
+++ b/coreweave/cks/resource_cluster.go
@@ -553,7 +553,7 @@ func (r *ClusterResource) Schema(ctx context.Context, req resource.SchemaRequest
 			"public": schema.BoolAttribute{
 				Optional:            true,
 				Computed:            true,
-				MarkdownDescription: "Whether the cluster's api-server is publicly accessible from the internet.",
+				MarkdownDescription: "Whether the cluster's api-server is publicly accessible from the internet.\n\t> WARNING: Do not set this attribute to `false` at cluster creation. Additional setup is required before a cluster can be made private. Check with your CoreWeave account team for details.",
 				Default:             booldefault.StaticBool(false),
 			},
 			"version": schema.StringAttribute{
diff --git a/docs/resources/cks_cluster.md b/docs/resources/cks_cluster.md
index cb497151..e88eaa81 100644
--- a/docs/resources/cks_cluster.md
+++ b/docs/resources/cks_cluster.md
@@ -87,7 +87,7 @@ The prefixes must exist in the cluster's VPC. This field is append-only.
 - `node_port_range` (Attributes) Kubernetes Service NodePort range. NodePort range can be expanded in existing clusters but not shrunk. Updating the NodePort range to a smaller range will require a replacement of the cluster. (see [below for nested schema](#nestedatt--node_port_range))
 - `oidc` (Attributes) OpenID Connect (OIDC) configuration for authentication to the api-server. (see [below for nested schema](#nestedatt--oidc))
 - `public` (Boolean) Whether the cluster's api-server is publicly accessible from the internet.
-  > WARNING: Do not set this attribute to `false` at cluster creation. Additional setup is required before a cluster can be made private. Check with your CoreWeave account team for details.
+	> WARNING: Do not set this attribute to `false` at cluster creation. Additional setup is required before a cluster can be made private. Check with your CoreWeave account team for details.
 - `shared_storage_cluster_id` (String) The `cluster_id` of the cluster to share storage with. Must be enabled by CoreWeave suppport. Contact CoreWeave support if you are interested in this feature.
 
 ### Read-Only