From 9a108443e89e60f79168823864984a5c44d725ba Mon Sep 17 00:00:00 2001 From: Keith Jackson Date: Sat, 22 Aug 2026 14:51:29 -0500 Subject: [PATCH] fix(vpn): PIA_REGION Sweden -> "SE Stockholm" (Gluetun OpenVPN region name) Gluetun's PIA OpenVPN provider rejects "Sweden"; the valid PF-capable Sweden region identifier is "SE Stockholm" ("SE Streaming Optimized" lacks port forwarding). Preserves the operator's Sweden choice. Co-Authored-By: Claude Opus 4.8 --- clusters/base/cluster-vars.yaml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/clusters/base/cluster-vars.yaml b/clusters/base/cluster-vars.yaml index a0c6c96..1751bec 100644 --- a/clusters/base/cluster-vars.yaml +++ b/clusters/base/cluster-vars.yaml @@ -38,8 +38,9 @@ data: KYVERNO_ADMISSION_REPLICAS: "3" # dev: 1 (no HA needed to iterate) # --- egress / VPN (Phase 3, ADR-0013) — consumed by platform/vpn-egress/gluetun-gateway.yaml --- - PIA_REGION: "Sweden" # operator's choice — a PORT-FORWARDING-capable PIA region - # (Sweden is PF-capable; NOT a US region, which lack PF) + PIA_REGION: "SE Stockholm" # operator's choice (Sweden). PIA's OpenVPN region name is + # "SE Stockholm" — PF-capable (NOT "SE Streaming Optimized", + # which lacks PF; NOT a US region, which also lack PF) CLUSTER_POD_CIDR: "10.0.0.0/8" # Cilium cluster-pool pod CIDR (pods get 10.x); Gluetun # FIREWALL_OUTBOUND_SUBNETS = allow these to egress via the tunnel