jakman85andClaude Opus 4.8 81ef78295a infra: direct kube-API access via kube-vip VIP + NAT (retire SSH tunnel) ...

Controller now reaches the kube-API directly through the pfSense NAT
(192.168.2.50:6443 -> kube-vip VIP 192.168.1.49:6443), validating TLS
against the VIP via tls-server-name. Removes the dev.sh SSH-tunnel
scaffolding and updates the ansible source-of-truth so a rebuild
regenerates a direct-access kubeconfig.

Co-Authored-By: Claude Opus 4.8 <[email protected]>

2026-08-25 22:10:27 -05:00

..

hypervisor

Phase 1 T-1.4 DONE: Flux reconciling clusters/dev from host Gitea

2026-08-16 15:14:09 -05:00

vpn_egress_gateway

vpn_egress_gateway: commit the ansible-vault host VPN creds vault (ADR-0015)

2026-08-24 15:00:58 -05:00

all.yml

infra: direct kube-API access via kube-vip VIP + NAT (retire SSH tunnel)

2026-08-25 22:10:27 -05:00