Skip to main content
Skip table of contents

Prerequisites for a Tunneled Attachment

These pages refer to DKP Enterprise and DKP Gov Advanced products.

Before you Begin

Prerequisites

To enable a tunneled attachment, you have the following additional prerequisites:

  • Ensure that kubetunnel is deployed on the Management Cluster.
    Use the following command to check if kubetunnel is deployed:

    CODE
    kubectl get appdeployments.apps.kommander.d2iq.io -n kommander kubetunnel

    The output should look similar to this:

    CODE
    NAME         APP                 AGE
    kubetunnel   kubetunnel-<version>   5h14m

Kubetunnel is deployed by default. If you need to install it manually, see Deploy Platform Applications via CLI and ensure you install it on the Management cluster.

  • Firewall rules:

The ingress rule on the Management cluster network must allow:

The egress rule on the Attached or Managed cluster private network must allow:

Protocol

HTTPS (TCP/443) and WebSocket

HTTPS (TCP/443) and WebSocket

Source

Any

Any node of the Attached or Managed cluster

Destination

DKP Traefik Service External IP/URL

DKP Traefik Service on the Management cluster

Choose your Next Step:

Attach a Cluster using a Tunnel via the UI

Attach a Cluster Using a Tunnel via the CLI

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.