Agent Not Connecting

Steps to diagnose and fix a cluster that does not appear as Connected in the dashboard.

Check pod status

kubectl get pods -n dataagent

All 4 containers should be Running. If any container is in CrashLoopBackOff, Error, or ImagePullBackOff, check its logs:

kubectl logs -n dataagent -l app.kubernetes.io/name=dataagent -c orchestrator
kubectl logs -n dataagent -l app.kubernetes.io/name=dataagent -c k8sgpt
kubectl logs -n dataagent -l app.kubernetes.io/name=dataagent -c metrics-collector
kubectl logs -n dataagent -l app.kubernetes.io/name=dataagent -c topology-analyzer

Image pull failure

If the pod is in ImagePullBackOff, the GHCR PAT is invalid or expired.

Generate a new GitHub PAT with read:packages scope
Update the Helm release:

helm upgrade dataagent oci://ghcr.io/data-agent-co/dataagent-chart \
  --namespace dataagent \
  --reset-then-reuse-values \
  --set imageCredentials.password=<new-pat>

Auth token invalid or expired

The auth token from the dashboard is valid for 60 minutes. If you installed the chart more than 60 minutes after copying the token, it will have expired.

Go to Settings → Clusters → Connect cluster in the dashboard
Copy a new auth token
Update the Helm release:

helm upgrade dataagent oci://ghcr.io/data-agent-co/dataagent-chart \
  --namespace dataagent \
  --reset-then-reuse-values \
  --set config.authToken=<new-token>

Network / egress blocked

The agent connects outbound to tunnel.data-agent.co:443. Verify the connection is reachable from the cluster:

kubectl run -n dataagent netcheck --image=alpine --rm -it --restart=Never -- \
  sh -c "apk add curl && curl -v https://tunnel.data-agent.co"

If the connection fails, check your cluster’s egress firewall rules and network policies. The agent requires outbound TCP to tunnel.data-agent.co:443.

TLS certificate issues

If the orchestrator logs show TLS errors, the CA certificate may not have been fetched correctly by the init container. You can override the CA manually:

Obtain the CA certificate PEM from DataAgent support
Install with the certificate value:

helm upgrade dataagent oci://ghcr.io/data-agent-co/dataagent-chart \
  --namespace dataagent \
  --reset-then-reuse-values \
  --set-file config.tlsCACert=/path/to/ca.pem

Still not connecting?

Contact support with:

Output of kubectl get pods -n dataagent
Output of kubectl logs -n dataagent -l app.kubernetes.io/name=dataagent -c orchestrator --tail=100
Your cluster name and Kubernetes version