Prerequisites for a Tunneled Attachment

These pages refer to DKP Enterprise and DKP Gov Advanced products.

Before you Begin

Gain more understanding of this approach by reviewing Attach a Cluster with Networking Restrictions.
Ensure you have reviewed the general Requirements for Attaching an Existing Cluster.

Prerequisites

To enable a tunneled attachment, you have the following additional prerequisites:

Ensure that kubetunnel is deployed on the Management Cluster.
Use the following command to check if kubetunnel is deployed:
CODE
```
kubectl get appdeployments.apps.kommander.d2iq.io -n kommander kubetunnel
```
The output should look similar to this:
CODE
```
NAME         APP                 AGE
kubetunnel   kubetunnel-<version>   5h14m
```

Kubetunnel is deployed by default. If you need to install it manually, see Deploy Platform Applications via CLI and ensure you install it on the Management cluster.

Firewall rules:

	The ingress rule on the Management cluster network must allow:	The egress rule on the Attached or Managed cluster private network must allow:
Protocol	HTTPS (TCP/443) and WebSocket	HTTPS (TCP/443) and WebSocket
Source	Any	Any node of the Attached or Managed cluster
Destination	DKP Traefik Service External IP/URL	DKP Traefik Service on the Management cluster

Choose your Next Step:

Attach a Cluster using a Tunnel via the UI

Attach a Cluster Using a Tunnel via the CLI