---
title: Network requirements
slug: network-requirements
createdAt: 2026-02-24T04:04:29.040Z
---

# Outbound connectivity (typical)

### Agents usually require outbound access to

- Kubegrade control plane endpoints
- Identity endpoints (if SSO-enabled)
- Git provider APIs (if PR generation enabled)
- Optional observability APIs/integrations



# Inbound connectivity

Prefer no inbound internet exposure to clusters for SaaS mode (outbound-only agent pattern), where possible.



## Proxy support

Document support for:

- HTTP/HTTPS proxy
- Authenticated proxies
- Custom CA bundles
- NO\_PROXY exclusions for internal services



## Recommended documentation items

- Exact FQDNs / ports
- TLS requirements
- Timeout/retry behavior
- Firewall allowlist guidance