From 54341964fc29c2210579ddff55e371c1ea7d84ac Mon Sep 17 00:00:00 2001 From: Keith Jackson Date: Mon, 24 Aug 2026 08:07:20 -0500 Subject: [PATCH] Enable ADR-0015 vpn-egress steering (host tunnel validated on k3s-dev-3) Host OpenVPN split-tunnel on k3s-dev-3 validated 2026-08-24: tun0 up, VPN egress 158.173.241.36, node default unchanged (WAN), scoped nft kill-switch active. Wire the CiliumEgressGatewayPolicy into the runtime kustomization so egress-class=vpn pods steer to the node tun0. Co-Authored-By: Claude Opus 4.8 --- platform/vpn-egress/kustomization.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/platform/vpn-egress/kustomization.yaml b/platform/vpn-egress/kustomization.yaml index 85bc449..822d7e1 100644 --- a/platform/vpn-egress/kustomization.yaml +++ b/platform/vpn-egress/kustomization.yaml @@ -6,3 +6,4 @@ resources: - gluetun-gateway.yaml - pia-credentials.sops.yaml - pia-custom-ovpn.sops.yaml # operator-provisioned: the PIA .ovpn (custom-provider mode). See README. + - egress-steering.yaml # ADR-0015: steer egress-class=vpn pods to the node tun0 (host tunnel validated 2026-08-24)