Kubernetes

How an agent reaches it

How you authenticate

1. Create a ServiceAccount with a role bound to only what the agent needs, then mint a token for it.
2. Store the kubeconfig as a FILE credential if you want the kubectl lane.
3. There is no fixed host: the API server address belongs to your cluster, so set a URI rule for it explicitly.

Connection details

Base URL

https://{apiserver}

Pagination

cursor

Common endpoints

Worth knowing

• Clusters commonly use a private CA, so certificate verification needs the cluster CA bundle. The kubectl lane handles this.
• kubectl is almost always simpler than raw HTTP here.