fix(vpn): define PIA_REGION + CLUSTER_POD_CIDR cluster-vars; correct pod CIDR + doc where
gluetun-gateway.yaml referenced ${PIA_REGION}/${CLUSTER_POD_CIDR} but they were never defined
in cluster-vars, and the README didn't say where to set them. Add both to
clusters/base/cluster-vars.yaml (ConfigMap data:, string values, Flux postBuild substitution).
CLUSTER_POD_CIDR is 10.0.0.0/8 (Cilium cluster-pool — pods get 10.x, confirmed live), NOT the
k3s 10.42.0.0/16 I'd assumed. README now names the file + format + per-env override + PF-region note.
Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
This commit is contained in:
1 parent
140cb651d2
commit
6591e11ad1
4 files changed
+63
-7
No files matched your search
@@ -4,7 +4,4 @@ kind: Kustomization
|
||||
resources:
|
||||
- namespace.yaml
|
||||
- gluetun-gateway.yaml
|
||||
# SOPS-encrypted PIA credentials (keys: username, password). Operator flow:
|
||||
# copy bootstrap/sops/secret-templates/pia-credentials.yaml.example here as pia-credentials.sops.yaml
|
||||
# (namespace: vpn-egress), fill + `sops -e -i`, then uncomment. See bootstrap/sops/CREDENTIALS.md.
|
||||
# - pia-credentials.sops.yaml
|
||||
- pia-credentials.sops.yaml
|
||||
Reference in new issue
Block a user