Entitle Agent - Network Access Requirements

The following topics will be discussed in this article.

DNS
Datadog
Entitle Agent image repository
AWS MSK
AWS S3 (Amazon)
Agent Remote settings
Kubernetes Internal Resources
Kubelet
Kubernetes API Server

DNS

For both EU and US Regions

Allow access to the DNS Server

Allow access to the following ports:

53

Datadog

For both EU and US Regions

Allow access to the following endpoints:

Cloud Monitoring as a Service | Datadog
*.datadoghq.com (this will allow all subdomains as well)

Allow access to the following ports:

443

Entitle Agent image repository

The Entitle agent is installed using a Docker image hosted on GitHub Container Repository.

For both EU and US Regions

Allow access from the Kubernetes nodes that run the Entitle agent to the following endpoints:

GitHub Actions
*.ghcr.io (this will allow all subdomains as well)

Allow access to the following ports:

443

AWS MSK (AWS Managed Kafka)

The Entitle agent requires access to Kafka brokers (Amazon MSK) for proper functionality. Please ensure your firewall allows access to the following endpoints based on your environment, including all subdomains (usually corresponding to the Kafka broker names).

For US Region installation

Allow access to the following endpoints:

entitleproduskafka.r5vnl8.c14.kafka.us-east-1.amazonaws.com
*.entitleproduskafka.r5vnl8.c14.kafka.us-east-1.amazonaws.com (this will allow all subdomains as well)

Allow access to the following ports: