1.Does the rancher server needs to talk to the k8s api server other than installing the cluster agent ? 2. can we do the cluster agent installation manually, because my cluster api server is not exposed to the public ?