* ipv4 forwarding init container
Signed-off-by: Kamil Szczygieł <kamil@szczygiel.io>
* typo
Signed-off-by: Kamil Szczygieł <kamil@szczygiel.io>
* openvpn: systemd-resolved, ip_forward, ubuntu fixes
- routing / ip_forward issue and workaround
- Ubuntu systemd-resolved and vpn gui issues
- Move openvpn.conf to openvpn.serverConf for custom lines written to the server config file
- Add openvpn.clientConf for custom lines written to the client config file
- Major version bump for these breaking change
- If chart is deployed using NodePort service, have clients connect to NodePort instead of externalPort
Signed-off-by: Jon Stelly <967068+jonstelly@users.noreply.github.com>
* Updates per PR comments/suggestions
Signed-off-by: Jon Stelly <967068+jonstelly@users.noreply.github.com>
* remove whitespace from values.yaml
Signed-off-by: Jon Stelly <967068+jonstelly@users.noreply.github.com>
* Add newlines
- Ensure newClientCert.sh contains newlines for each config option, prevents multiple openvpn directives from ending up on same line and being invalid
Signed-off-by: Jon Stelly <967068+jonstelly@users.noreply.github.com>
Co-authored-by: Kamil Szczygieł <kamil@szczygiel.io>
* [stable/openvpn] add support for connecting to istio services.
Signed-off-by: Enno Boland <mail@eboland.de>
* [stable/openvpn] document openvpn.istio.enabled variable
Signed-off-by: Enno Boland <mail@eboland.de>
* [stable/openvpn] make envoy port configurable.
Signed-off-by: Enno Boland <mail@eboland.de>
* [stable/openvpn] use ISTIO_INBOUND instead of default PREROUTING chain.
this makes openvpn fail while starting if this pod lack istio instead of
rejecting packages at runtime.
Signed-off-by: Enno Boland <mail@eboland.de>
* [stable/openvpn] bump version
Signed-off-by: Enno Boland <mail@eboland.de>
* added crl support to openvpn chart
Signed-off-by: Christian Jantz <chris@safewrd.com>
* added documentation on how to revoke certificates
Signed-off-by: Christian Jantz <chris@safewrd.com>
* Detect current network and netmask
Previously the network was guessed (assumed it was a /24 by replacing the last octet with a 0) and then later the netmask was hardcoded to 255.255.240.0 as a result the requested route is almost always incorrect. As most people supply their own or use the vpn tunnel as a default gateway it's probably rare to cause any issues.
Signed-off-by: Harold Drost <baelish@bluecell.net>
* Removing unnecessary debug messages.
Signed-off-by: Harold Drost <baelish@bluecell.net>
* Actually fixing the thing it was all about... :$
My testing worked because helm believed the `openvpn.conf` unchanged and therefore didn't replace the manually edited file which had the change in this commit.
Tested using brand new deployment now works correctly and without routing errors.
Signed-off-by: Harold Drost <baelish@bluecell.net>
* Add configurable `podAnnotations` to openvpn chart
Use case is using `ark` + `restic` to take backups which requires pods
with persistent data to be annotated like:
```
kubectl annotate pod openvpn-6cff5449-wl48k backup.ark.heptio.com/backup-volumes=certs
```
Signed-off-by: Lyle Franklin <lylejfranklin@gmail.com>
* Use toYaml helper in openvpn
Signed-off-by: Lyle Franklin <lylejfranklin@gmail.com>
* Additing an option to create extra route for Kubernetes service network
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>
* bump chart version
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>
* bump minor update version
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>
* [stable/openvpn] fixing typo in openvpn.OVPN_K8S_SVC_SUBNET value name
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>
* [stable/openvpn] fix openvpn.OVPN_K8S_SVC_NETWORK and openvpn.OVPN_K8S_SVC_SUBNET names in values.yaml
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>
When #5174 was merged, it brought back parts of the README that were
changed in #5489, resulting in unintentional duplicate documentation of chart
values.
* [stable/openvpn] Add option to remove `dhcp-option DOMAIN`
Not all VPN clients support this option, so having the option to remove
it can prevent errors on client connections.
* Update Chart.yaml
- All resources directly created have `app`, `chart`, `release`, and `heritage`
- Because deployment pod selectors are immutable in API version apps/v1,
openvpn deployment pods no longer have chart version in `chart` to
allow updating.
* Add a possibility to configure nodePort explicitly for OpenVPN
* Version bump
* Check if .Values.service.type is "NodePort"
* Document the nodePort setting
Matt Farina
Scott Rigby
Gorka Maiztegi
Charney Kaye
j771andJustinStGermain
Gerard
irozet
Jon StellyandKamil Szczygieł
Alan Tang
Aaron-ML
Simon Rüegg
Luke Addison
Zihao Zhang
Jason Gwartz
Enno Boland
Luke Addison
Christian Jantz
James Robinson
Harold Drost
John Felten
Yaniv Oliver
Jai Pradeesh
Lyle Franklin
Kevin Pullin
ejether
jakemccloskey
Jonathan Meyers
Dan Wendorf
Valerio Coltrè
Christian Budde Christensen
AdamDang
Alex Chistyakov
Alexandre Cartapanis