Network requirements

outbound connectivity (typical) agents usually require outbound access to kubegrade control plane endpoints identity endpoints (if sso enabled) git provider apis (if pr generation enabled) optional observability apis/integrations inbound connectivity prefer no inbound internet exposure to clusters for saas mode (outbound only agent pattern), where possible proxy support document support for http/https proxy authenticated proxies custom ca bundles no proxy exclusions for internal services recommended documentation items exact fqdns / ports tls requirements timeout/retry behavior firewall allowlist guidance