Enable ADR-0015 vpn-egress steering (host tunnel validated on k3s-dev-3)

Host OpenVPN split-tunnel on k3s-dev-3 validated 2026-08-24: tun0 up, VPN egress 158.173.241.36, node default unchanged (WAN), scoped nft kill-switch active. Wire the CiliumEgressGatewayPolicy into the runtime kustomization so egress-class=vpn pods steer to the node tun0. Co-Authored-By: Claude Opus 4.8 <[email protected]>
2026-08-24 08:07:20 -05:00
1 parent 83ea050e82
commit 54341964fc
@@ -6,3 +6,4 @@ resources:
  - gluetun-gateway.yaml
  - pia-credentials.sops.yaml
  - pia-custom-ovpn.sops.yaml   # operator-provisioned: the PIA .ovpn (custom-provider mode). See README.
+  - egress-steering.yaml        # ADR-0015: steer egress-class=vpn pods to the node tun0 (host tunnel validated 2026-08-24)