Network requirements
3 min
Outbound connectivity (typical)
Agents usually require outbound access to
- Kubegrade control plane endpoints
- Identity endpoints (if SSO-enabled)
- Git provider APIs (if PR generation enabled)
- Optional observability APIs/integrations
Inbound connectivity
Prefer no inbound internet exposure to clusters for SaaS mode (outbound-only agent pattern), where possible.
Proxy support
Document support for:
- HTTP/HTTPS proxy
- Authenticated proxies
- Custom CA bundles
- NO_PROXY exclusions for internal services
Recommended documentation items
- Exact FQDNs / ports
- TLS requirements
- Timeout/retry behavior
- Firewall allowlist guidance