jakman85andClaude Opus 4.8
54341964fc
Host OpenVPN split-tunnel on k3s-dev-3 validated 2026-08-24: tun0 up, VPN egress 158.173.241.36, node default unchanged (WAN), scoped nft kill-switch active. Wire the CiliumEgressGatewayPolicy into the runtime kustomization so egress-class=vpn pods steer to the node tun0. Co-Authored-By: Claude Opus 4.8 <[email protected]>
10 lines
383 B
YAML
10 lines
383 B
YAML
---
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
resources:
|
|
- namespace.yaml
|
|
- gluetun-gateway.yaml
|
|
- pia-credentials.sops.yaml
|
|
- pia-custom-ovpn.sops.yaml # operator-provisioned: the PIA .ovpn (custom-provider mode). See README.
|
|
- egress-steering.yaml # ADR-0015: steer egress-class=vpn pods to the node tun0 (host tunnel validated 2026-08-24)
|