Commit Graph
51 Commits
Author SHA1 Message Date
Simon Rüegg 3042ff7201 [stable/openvpn] Kubernetes 1.16 compatibility (#17678)
Signed-off-by: Simon Rüegg <simon@rueggs.ch>
2019-10-03 11:45:56 -07:00
Luke Addison f3add87e2c [stable/openvpn] Use octal format and remove default exec permissions (#16704)
* Use octal format and remove default exec permissions

Signed-off-by: Luke Addison <luke.addison@jetstack.io>

* Bump chart version

Signed-off-by: Luke Addison <luke.addison@jetstack.io>
2019-08-31 03:55:47 -07:00
Luke Addison 91c96f2697 [stable/openvpn] Fix CRL keystore secret permissions (#15555)
* Allow CRL PEM file to be read by anyone

Signed-off-by: Luke Addison <luke.addison@jetstack.io>

* Fix CRL file check

Signed-off-by: Luke Addison <luke.addison@jetstack.io>

* Change keystore mountpoint and chown CRL to nobody:nogroup

Signed-off-by: Luke Addison <luke.addison@jetstack.io>

* Preserve crl.pem permissions on copy

Signed-off-by: Luke Addison <luke.addison@jetstack.io>

* Revert mount path change

Signed-off-by: Luke Addison <luke.addison@jetstack.io>

* Fix directory location

Signed-off-by: Luke Addison <luke.addison@jetstack.io>

* Use octal format

Signed-off-by: Luke Addison <luke.addison@jetstack.io>

* Bump chart version

Signed-off-by: Luke Addison <luke.addison@jetstack.io>
2019-08-29 14:41:00 -07:00
Zihao Zhang 5b3a68dcaf Make openvpn work in Headless Services and HostPort mode (#15469)
Signed-off-by: Zihao Zhang <zzh8829@gmail.com>
2019-08-24 05:54:23 -07:00
Jason Gwartz db491b02ca adds dippynark owner - fix patch diff (#15756)
Signed-off-by: Jason Gwartz <jason.gwartz@gmail.com>
2019-08-09 13:51:13 -07:00
Enno Boland 7c1ad8c2b5 [stable/openvpn] custom definitions for iptables rules (#16091)
* [stable/openvpn] custom definitions for iptables rules

Signed-off-by: Enno Boland <mail@eboland.de>

* [stable/openvpn] document iptablesExtra

Signed-off-by: Enno Boland <mail@eboland.de>
2019-08-05 11:21:49 -07:00
Enno Boland f07c423d10 [stable/openvpn] Fix istio iptables rules (#15993)
* [stable/openvpn] Fix istio iptables rules

Pull request #15515 introduced istio support. Unfortunately, I added a
premature optimisation that is reverted by this commit.

Signed-off-by: Enno Boland <mail@eboland.de>

* [stable/openvpn] bump version

Signed-off-by: Enno Boland <mail@eboland.de>
2019-07-31 04:42:22 -07:00
Enno Boland 06e2db0603 [stable/openvpn]: add support for connecting to istio services. (#15515)
* [stable/openvpn] add support for connecting to istio services.

Signed-off-by: Enno Boland <mail@eboland.de>

* [stable/openvpn] document openvpn.istio.enabled variable

Signed-off-by: Enno Boland <mail@eboland.de>

* [stable/openvpn] make envoy port configurable.

Signed-off-by: Enno Boland <mail@eboland.de>

* [stable/openvpn] use ISTIO_INBOUND instead of default PREROUTING chain.

this makes openvpn fail while starting if this pod lack istio instead of
rejecting packages at runtime.

Signed-off-by: Enno Boland <mail@eboland.de>

* [stable/openvpn] bump version

Signed-off-by: Enno Boland <mail@eboland.de>
2019-07-21 08:30:52 -07:00
Luke Addison 9cf615cbcb [stable/openvpn] Add readiness probe (#15580)
* Add OpenVPN readiness probe

Signed-off-by: Luke Addison <luke.addison@jetstack.io>

* Use internal port

Signed-off-by: Luke Addison <luke.addison@jetstack.io>

* Bump chart version

Signed-off-by: Luke Addison <luke.addison@jetstack.io>
2019-07-16 14:32:06 -07:00
Luke Addison 4284bf64db [stable/openvpn/ Exec OpenVPN Process (#15575)
* Exec OpenVPN

Signed-off-by: Luke Addison <luke.addison@jetstack.io>

* Add signal explanation comment

Signed-off-by: Luke Addison <luke.addison@jetstack.io>
2019-07-16 13:52:48 -07:00
irozet 6ef76a6f84 [stable/openvpn] issue #14695 adding crl.pem to secret (#14777)
* Additing an option to create extra route for Kubernetes service network

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>

* bump chart version

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>

* bump minor update version

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>

* [stable/openvpn] fixing typo in openvpn.OVPN_K8S_SVC_SUBNET value name

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>

* [stable/openvpn] fix openvpn.OVPN_K8S_SVC_NETWORK and openvpn.OVPN_K8S_SVC_SUBNET names in values.yaml

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>

* [stable/openvpn] adding ability to keep certificates in chart values

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>

* passing certificates in secret rather than values

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>

* remove wrong values from from doc

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>

* fix typo

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>

* [stable/openvpn] adding crl.pem to secret

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>

* [stable/openvpn] making certificate revocation list optional

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>
2019-06-18 02:24:16 -07:00
Gerard 215cf60b26 [stable/openvpn] allow setting up ta.key and overriding cipher. (#14619)
* Revert a faultily included commit

Signed-off-by: gboor <gerard@tesseract.nl>
Signed-off-by: Gerard <gerard@tesseract.nl>

* Minor version bump

Signed-off-by: gboor <gerard@tesseract.nl>
Signed-off-by: Gerard <gerard@tesseract.nl>
2019-06-09 04:09:05 -07:00
Christian Jantz 100d5a156b [stable/openvpn] add certificate revocation list support (#14452)
* added crl support to openvpn chart
Signed-off-by: Christian Jantz <chris@safewrd.com>

* added documentation on how to revoke certificates
Signed-off-by: Christian Jantz <chris@safewrd.com>
2019-06-08 01:09:05 -07:00
James Robinson 99e75356ad Add namespace to command documentation in NOTES.txt (#13870)
Bump chart version

Signed-off-by: Jim Robinson <jscrobinson@gmail.com>
Signed-off-by: Jim Robinson <jim@croud.co.uk>
2019-05-15 15:11:18 -07:00
Harold Drost a73e53019c Detect current network and netmask (#13250)
* Detect current network and netmask

Previously the network was guessed (assumed it was a /24 by replacing the last octet with a 0) and then later the netmask was hardcoded to 255.255.240.0 as a result the requested route is almost always incorrect. As most people supply their own or use the vpn tunnel as a default gateway it's probably rare to cause any issues.

Signed-off-by: Harold Drost <baelish@bluecell.net>

* Removing unnecessary debug messages.

Signed-off-by: Harold Drost <baelish@bluecell.net>

* Actually fixing the thing it was all about... :$

My testing worked because helm believed the `openvpn.conf` unchanged and therefore didn't replace the manually edited file which had the change in this commit.
Tested using brand new deployment now works correctly and without routing errors.

Signed-off-by: Harold Drost <baelish@bluecell.net>
2019-04-25 10:22:47 -07:00
John Felten dbeab9d1da Update OWNERS (#13121)
* Update OWNERS

Signed-off-by: jfelten <john.felten@hbo.com>

* Update Chart.yaml

Signed-off-by: jfelten <john.felten@hbo.com>
2019-04-22 06:23:44 -07:00
Yaniv Oliver e9b0beef05 [stable/openvpn] Updated notes to use logs command instead of deprecated log command (#12170)
* Updated OpenVPN chart notes to use logs command instead of deprecated log command

Signed-off-by: Yaniv Oliver <yanivoliver@gmail.com>

* Updated OpenVPN readme file with updated logs command

Signed-off-by: Yaniv Oliver <yanivoliver@gmail.com>
2019-03-13 18:56:22 -07:00
Jai Pradeesh 5bbf2df168 [stable/openvpn] Adds nodeSelector (#9965)
Signed-off-by: Jai <jai@deepsource.io>
2019-02-26 01:57:08 -08:00
Lyle Franklin ef4e666253 Add configurable podAnnotations to openvpn chart (#9835)
* Add configurable `podAnnotations` to openvpn chart

Use case is using `ark` + `restic` to take backups which requires pods
with persistent data to be annotated like:
```
kubectl annotate pod openvpn-6cff5449-wl48k backup.ark.heptio.com/backup-volumes=certs
```

Signed-off-by: Lyle Franklin <lylejfranklin@gmail.com>

* Use toYaml helper in openvpn

Signed-off-by: Lyle Franklin <lylejfranklin@gmail.com>
2019-01-02 11:53:02 -08:00
irozet 9cfbfcbbfe [stable/openvpn] adding ability to keep certificates in chart values (#7916)
* Additing an option to create extra route for Kubernetes service network

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>

* bump chart version

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>

* bump minor update version

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>

* [stable/openvpn] fixing typo in openvpn.OVPN_K8S_SVC_SUBNET value name

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>

* [stable/openvpn] fix openvpn.OVPN_K8S_SVC_NETWORK and openvpn.OVPN_K8S_SVC_SUBNET names in values.yaml

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>

* [stable/openvpn] adding ability to keep certificates in chart values

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>

* passing certificates in secret rather than values

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>

* remove wrong values from from doc

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>

* fix typo

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>
2018-10-29 07:24:43 -07:00
Kevin Pullin 9e0261a6b0 OpenVPN NOTES.txt - Fix label key in the pod status command and add 'namespace' flag (#8484)
In `NOTES.txt`, the command to follow the pod's log has a label filter with the old `type` key instead of the new `app` key.

Additionally add a 'namespace' flag per https://github.com/helm/charts/pull/5817#discussion_r193873501

Signed-off-by: Kevin Pullin <kevin.pullin@gmail.com>
2018-10-15 15:11:26 -07:00
irozet a99b192557 [stable/openvpn] fixing typo in OVPN_K8S_SVC_SUBNET property name (#7503)
* Additing an option to create extra route for Kubernetes service network

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>

* bump chart version

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>

* bump minor update version

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>

* [stable/openvpn] fixing typo in openvpn.OVPN_K8S_SVC_SUBNET value name

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>

* [stable/openvpn] fix openvpn.OVPN_K8S_SVC_NETWORK and openvpn.OVPN_K8S_SVC_SUBNET names in values.yaml

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>
2018-09-23 11:12:39 -07:00
irozet eb47ec71d5 Additing an option to create extra route for Kubernetes service network (#7470)
* Additing an option to create extra route for Kubernetes service network

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>

* bump chart version

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>

* bump minor update version

Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com>
2018-08-31 14:38:43 -07:00
ejether 21c58fe9af replaced single line DOMAIN in openvpn config with multi-line DOMAIN-… (#6258)
* replaced single line DOMAIN in openvpn config with multi-line DOMAIN-SEARCH to make it work with Mac OSX and tunnelblick

* Update Chart.yaml
2018-07-02 13:07:18 -07:00
jakemccloskey dc3c22f108 [stable/openvpn] Fixes for client config file (#6285)
* Remove dh params from client config. Unwrap remote config.

* Bump version.
2018-06-26 19:55:20 -07:00
Jonathan Meyers 38a1c98ed1 [stable/openvpn] added ability to configure LoadBalancerSourceRanges (#5989)
* added ability to restrict LoadBalancerSourceRanges

* Bumped Chart version

* Bump minor version for new feature

* Update Chart.yaml
2018-06-17 09:01:30 -07:00
Dan Wendorf 467c075fce [stable/openvpn] Configurable update strategy (#5970) 2018-06-17 06:38:30 -07:00
Dan Wendorf f4223aed8a [stable/openvpn] Remove old README config for chart values (#5646)
When #5174 was merged, it brought back parts of the README that were
changed in #5489, resulting in unintentional duplicate documentation of chart
values.
2018-05-24 12:59:32 -07:00
Dan Wendorf 6489136aef [stable/openvpn] Optionally remove redirect-gateway config (#5174)
* [stable/openvpn] Optionally remove redirect-gateway config

It's not always desirable to have all traffic redirect over the VPN

* Update Chart.yaml
2018-05-17 21:43:51 -07:00
Valerio Coltrè b552477505 Enhance openvpn chart (#5489)
* openvpn: annotate config sha, to reboot services on configuration change

* openvpn: add externalIP support

* openvpn: remove default nodeport, that way it's auto-assigned

* openvpn: configuration revamp

* openvpn: removed non-working script

* openvpn: configuration reword

* openvpn: explicitly suggested how to disable kube-dns bridge

* openvpn: subPath is now optional
2018-05-17 11:05:51 -07:00
Dan Wendorf 1da75ed746 [stable/openvpn] Custom annotations for service (#5173)
* [stable/openvpn] Custom annotations for service

Allows, for example, specifying a custom domain name to external-dns.

* Update values.yaml
2018-05-11 01:08:04 -07:00
Dan Wendorf ef78db8024 [stable/openvpn] README scripts reflect new labels (#5402)
- Update readme instructions to work with the new labels introduced in
3.0.0.
- Quote bash variables to avoid word splitting
2018-05-09 23:46:53 -07:00
Dan Wendorf 5cef3e39fd [stable/openvpn] Add option to remove dhcp-option DOMAIN (#5404)
* [stable/openvpn] Add option to remove `dhcp-option DOMAIN`

Not all VPN clients support this option, so having the option to remove
it can prevent errors on client connections.

* Update Chart.yaml
2018-05-09 15:38:53 -07:00
Christian Budde Christensen b3dc4326b5 Add loadBalancerIP to OpenVPN (#5389) 2018-05-09 15:23:03 -07:00
Dan Wendorf 82d3c6f8d6 [stable/openvpn] service label selector match pod (#5460)
Fixes #5455
2018-05-09 13:14:52 -07:00
Dan Wendorf fbea3c479a [stable/openvpn] Update resource labels to latest best practices (#5175)
- All resources directly created have `app`, `chart`, `release`, and `heritage`
- Because deployment pod selectors are immutable in API version apps/v1,
  openvpn deployment pods no longer have chart version in `chart` to
  allow updating.
2018-05-04 09:13:52 -07:00
AdamDang db51c84fe0 Add appVersion key for openvpn (#4691)
The key "appVersion" is needed for ci testing, it's missing in this yaml. That sometimes will cause testing failure.
2018-04-04 18:07:08 -07:00
Alex Chistyakov 8b9f1b7ec5 Add a possibility to configure nodePort explicitly for OpenVPN (#3977)
* Add a possibility to configure nodePort explicitly for OpenVPN

* Version bump

* Check if .Values.service.type is "NodePort"

* Document the nodePort setting
2018-03-30 13:17:03 -07:00
Matt Farina 0bb92f96fe Adding OWNERS file for openvpn chart 2017-12-13 15:14:21 -05:00
Alexandre Cartapanis 59579658de Supports for existing volume claim (#2984)
Supports for existing volume claim
2017-12-11 17:38:19 +01:00
Kevin Schumacher 141e870866 [stable/openvpn] #1785 namespace defined templates with chart name (#2168) 2017-10-11 16:55:43 +05:30
Guang Ya Liu 1ff58eef78 [stable/openvpn] Use storageClassName for openvpn. (#2018) 2017-09-10 11:17:14 -05:00
John Felten ce8a20e0b3 Update README.md (#1907) 2017-09-04 15:59:00 -05:00
Micah Hausler 78e1ce860c OpenVPN chart fixes (#1541)
* [stable/openvpn] Fixed emptyDir indentation

* [stable/openvpn] Added namespacing to components

* [stable/openvpn] Added arbitrary openvpn configuration

* [stable/openvpn] Added instructions for use with AWS

* Indent commands listed in NOTES.txt
2017-07-28 12:36:40 +05:30
Frederic Hemberger 912f50c716 Use consistent whitespace in template placeholders (#1437)
Use consistent whitespace in template placeholders
2017-07-09 21:11:24 +02:00
John Felten 86ce997b70 [stable/openvpn] added persistent volumes for openvpn certs (#526)
* added persistent volumes for openvpn certs

* PR-526 review changes

* bumping version per review comments

* made variable capitalization consistent per review comments

* updated image tag
2017-05-10 14:49:39 -07:00
Paulo Rafael Feodrippe 010aa1ed3b Use stable repository for openvpn chart (#963)
This chart is not at incubator repo
2017-05-04 10:21:53 -07:00
Victor Quinn 91dcfc9e94 [stable/openvpn] Fix formatting and typos (#864)
* [stable/openvpn] Fix formatting and typos

* bump version
2017-04-06 11:30:05 +01:00
Dave Parfitt c63b456c37 update formatting in OpenVPN chart README (#720) 2017-03-16 22:16:54 -07:00
Reinhard Nägele efda2e10f7 [stable/openvpn] Remove helm.sh/created annotations (#506)
* [stable/openvpn] Remove helm.sh/created annotations

* openvpn: bump version to 0.1.1
2017-01-27 14:23:22 -08:00