Prerequisites
- A Kubernetes cluster with
kubectlconfigured and pointing to the correct context - Helm installed on your machine
- A Draftt account with tenant admin permissions (to create an access key)
Setup
1
Select a cluster
In Draftt, go to Integrations > K8s Explorer > Add. Select the cluster you want to connect.
2
Add the Draftt Helm repository
Add and update the Draftt Helm chart repository:
3
Create a Draftt API access key
Navigate to Settings > Access Keys in Draftt. Create a new access key with tenant admin permissions. Save the key. You will need it in the next step.
4
Create a Kubernetes Secret
The commands below assume that you deploy Draftt Explorer in an existing
monitoring namespace. You can use a different namespace, but you must update the namespace in each command accordingly.5
Install the Helm chart
Install the Draftt Explorer chart:Replace
<YOUR_K8S_CLUSTER_IDENTIFIER> with a name that identifies this cluster in Draftt (for example, arn:aws:eks:us-east-1:12345678910:cluster/production-us-east-1).6
Validate the integration
Run the collector job manually to verify everything is working:Check the job logs to confirm that data was sent to Draftt successfully. Once validated, the collector runs automatically on its configured schedule.
Upgrade from Draftt collector agent version 0.0.1
Use these instructions to upgrade an existing Draftt collector installation from agent version0.0.1.
1
Update the Draftt Helm repository
2
Review the current release values
The next step uses
--reset-values, so Helm will not retain these values automatically.3
Upgrade the collector
--reset-values removes the stored legacy values and applies the agent v2 chart defaults. To reapply values identified in the previous step, use:--setor--set-stringfor individual values--values <VALUES_FILE>or-f <VALUES_FILE>for a values file
4
Verify the upgrade
What Draftt collects
Draftt Explorer is a read-only collector. It discovers resources exposed through the Kubernetes API and sends their metadata and configuration to Draftt for analysis. It does not modify cluster resources.
* Configuration refers to the Kubernetes resource
spec.
Collected metadata includes:
- Resource identity
- Namespace
- API version
- Labels
- Annotations
- Owner references
- Management signals
Draftt does not collect sensitive information from the cluster. All collected configuration is sanitized before it is sent to Draftt.
Supported environments
The Helm-based collector works with any Kubernetes distribution: managed services (EKS, AKS, GKE), self-managed clusters, and on-premises deployments. Connect multiple clusters by repeating the setup for each one.Verify your connection
After the test job completes, return to Integrations > K8s Explorer in Draftt. The connected cluster shows a status:- Healthy — The collector is running and Draftt is receiving data.
- Unhealthy — Check that the API key Secret exists in the correct namespace, the Helm chart is installed, and the CronJob is scheduled.
Troubleshooting
Job fails with authentication error: Verify thedraftt-api-token secret exists in the correct namespace and contains a valid API key with tenant admin permissions.
No data appearing in Draftt: Confirm the clusterIdentifier value matches what you expect in the Draftt dashboard. Check the job logs with kubectl logs job/draftt-test-run -n monitoring.
Helm install fails: Ensure the Draftt Helm repo was added and updated (helm repo update). Verify the target namespace exists (kubectl create namespace monitoring if needed).