From 13a8df4e4a1e509662cbb14059255c27cac0302c Mon Sep 17 00:00:00 2001 From: Keith Jackson Date: Fri, 21 Aug 2026 23:10:47 -0500 Subject: [PATCH] fix(vpn): bump Gluetun to v3.41.0 (v3.40.0 lacks PIA WireGuard support) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The deployed v3.40.0 rejected PIA+WireGuard ('private internet access is not valid for Wireguard'). Verified v3.41.0 accepts the PIA+WireGuard provider/protocol (passes config validation; ADR-0013's model holds — v3.40.0 was just too old). Bump the pin. Co-Authored-By: Claude Opus 4.8 (1M context) --- platform/vpn-egress/gluetun-gateway.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/platform/vpn-egress/gluetun-gateway.yaml b/platform/vpn-egress/gluetun-gateway.yaml index 9ff0c6c..3f1e7ff 100644 --- a/platform/vpn-egress/gluetun-gateway.yaml +++ b/platform/vpn-egress/gluetun-gateway.yaml @@ -29,7 +29,9 @@ spec: spec: containers: - name: gluetun - image: qmcgaw/gluetun:v3.40.0 # pinned; Renovate bumps + image: qmcgaw/gluetun:v3.41.0 # pinned; Renovate bumps. NOTE: PIA+WireGuard support + # requires >= v3.41 (v3.40.0 rejects "private internet + # access" as a WireGuard provider — verified at deploy). securityContext: capabilities: add: ["NET_ADMIN"] # required for the tunnel + firewall