Prerequisites
What you need before connecting your first cluster.
Kubernetes
| Requirement | Minimum |
|---|---|
| Kubernetes version | 1.25 |
| Helm | 3.10 |
kubectl access | Cluster-admin or equivalent |
The agent runs as a single pod. It requires a service account with read access to cluster resources — the Helm chart creates this automatically.
Network
The agent makes a single outbound connection. No inbound ports or firewall rules are needed.
| Destination | Port | Protocol | Purpose |
|---|---|---|---|
tunnel.data-agent.co | 443 | gRPC over TLS | Agent → Hub tunnel |
If your cluster runs behind an egress proxy or firewall, allow outbound TCP to tunnel.data-agent.co:443.
DataAgent account
You need a DataAgent organisation and at least the Operator role to register clusters. If you do not have an account, contact your organisation owner.
Your organisation owner can retrieve the auth token from Settings → Clusters → Connect cluster in the dashboard.