Simon Rüegg
3042ff7201
[stable/openvpn] Kubernetes 1.16 compatibility ( #17678 )
...
Signed-off-by: Simon Rüegg <simon@rueggs.ch >
2019-10-03 11:45:56 -07:00
Luke Addison
f3add87e2c
[stable/openvpn] Use octal format and remove default exec permissions ( #16704 )
...
* Use octal format and remove default exec permissions
Signed-off-by: Luke Addison <luke.addison@jetstack.io >
* Bump chart version
Signed-off-by: Luke Addison <luke.addison@jetstack.io >
2019-08-31 03:55:47 -07:00
Luke Addison
91c96f2697
[stable/openvpn] Fix CRL keystore secret permissions ( #15555 )
...
* Allow CRL PEM file to be read by anyone
Signed-off-by: Luke Addison <luke.addison@jetstack.io >
* Fix CRL file check
Signed-off-by: Luke Addison <luke.addison@jetstack.io >
* Change keystore mountpoint and chown CRL to nobody:nogroup
Signed-off-by: Luke Addison <luke.addison@jetstack.io >
* Preserve crl.pem permissions on copy
Signed-off-by: Luke Addison <luke.addison@jetstack.io >
* Revert mount path change
Signed-off-by: Luke Addison <luke.addison@jetstack.io >
* Fix directory location
Signed-off-by: Luke Addison <luke.addison@jetstack.io >
* Use octal format
Signed-off-by: Luke Addison <luke.addison@jetstack.io >
* Bump chart version
Signed-off-by: Luke Addison <luke.addison@jetstack.io >
2019-08-29 14:41:00 -07:00
Zihao Zhang
5b3a68dcaf
Make openvpn work in Headless Services and HostPort mode ( #15469 )
...
Signed-off-by: Zihao Zhang <zzh8829@gmail.com >
2019-08-24 05:54:23 -07:00
Jason Gwartz
db491b02ca
adds dippynark owner - fix patch diff ( #15756 )
...
Signed-off-by: Jason Gwartz <jason.gwartz@gmail.com >
2019-08-09 13:51:13 -07:00
Enno Boland
7c1ad8c2b5
[stable/openvpn] custom definitions for iptables rules ( #16091 )
...
* [stable/openvpn] custom definitions for iptables rules
Signed-off-by: Enno Boland <mail@eboland.de >
* [stable/openvpn] document iptablesExtra
Signed-off-by: Enno Boland <mail@eboland.de >
2019-08-05 11:21:49 -07:00
Enno Boland
f07c423d10
[stable/openvpn] Fix istio iptables rules ( #15993 )
...
* [stable/openvpn] Fix istio iptables rules
Pull request #15515 introduced istio support. Unfortunately, I added a
premature optimisation that is reverted by this commit.
Signed-off-by: Enno Boland <mail@eboland.de >
* [stable/openvpn] bump version
Signed-off-by: Enno Boland <mail@eboland.de >
2019-07-31 04:42:22 -07:00
Enno Boland
06e2db0603
[stable/openvpn]: add support for connecting to istio services. ( #15515 )
...
* [stable/openvpn] add support for connecting to istio services.
Signed-off-by: Enno Boland <mail@eboland.de >
* [stable/openvpn] document openvpn.istio.enabled variable
Signed-off-by: Enno Boland <mail@eboland.de >
* [stable/openvpn] make envoy port configurable.
Signed-off-by: Enno Boland <mail@eboland.de >
* [stable/openvpn] use ISTIO_INBOUND instead of default PREROUTING chain.
this makes openvpn fail while starting if this pod lack istio instead of
rejecting packages at runtime.
Signed-off-by: Enno Boland <mail@eboland.de >
* [stable/openvpn] bump version
Signed-off-by: Enno Boland <mail@eboland.de >
2019-07-21 08:30:52 -07:00
Luke Addison
9cf615cbcb
[stable/openvpn] Add readiness probe ( #15580 )
...
* Add OpenVPN readiness probe
Signed-off-by: Luke Addison <luke.addison@jetstack.io >
* Use internal port
Signed-off-by: Luke Addison <luke.addison@jetstack.io >
* Bump chart version
Signed-off-by: Luke Addison <luke.addison@jetstack.io >
2019-07-16 14:32:06 -07:00
Luke Addison
4284bf64db
[stable/openvpn/ Exec OpenVPN Process ( #15575 )
...
* Exec OpenVPN
Signed-off-by: Luke Addison <luke.addison@jetstack.io >
* Add signal explanation comment
Signed-off-by: Luke Addison <luke.addison@jetstack.io >
2019-07-16 13:52:48 -07:00
irozet
6ef76a6f84
[stable/openvpn] issue #14695 adding crl.pem to secret ( #14777 )
...
* Additing an option to create extra route for Kubernetes service network
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
* bump chart version
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
* bump minor update version
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
* [stable/openvpn] fixing typo in openvpn.OVPN_K8S_SVC_SUBNET value name
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
* [stable/openvpn] fix openvpn.OVPN_K8S_SVC_NETWORK and openvpn.OVPN_K8S_SVC_SUBNET names in values.yaml
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
* [stable/openvpn] adding ability to keep certificates in chart values
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
* passing certificates in secret rather than values
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
* remove wrong values from from doc
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
* fix typo
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
* [stable/openvpn] adding crl.pem to secret
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
* [stable/openvpn] making certificate revocation list optional
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
2019-06-18 02:24:16 -07:00
Gerard
215cf60b26
[stable/openvpn] allow setting up ta.key and overriding cipher. ( #14619 )
...
* Revert a faultily included commit
Signed-off-by: gboor <gerard@tesseract.nl >
Signed-off-by: Gerard <gerard@tesseract.nl >
* Minor version bump
Signed-off-by: gboor <gerard@tesseract.nl >
Signed-off-by: Gerard <gerard@tesseract.nl >
2019-06-09 04:09:05 -07:00
Christian Jantz
100d5a156b
[stable/openvpn] add certificate revocation list support ( #14452 )
...
* added crl support to openvpn chart
Signed-off-by: Christian Jantz <chris@safewrd.com >
* added documentation on how to revoke certificates
Signed-off-by: Christian Jantz <chris@safewrd.com >
2019-06-08 01:09:05 -07:00
James Robinson
99e75356ad
Add namespace to command documentation in NOTES.txt ( #13870 )
...
Bump chart version
Signed-off-by: Jim Robinson <jscrobinson@gmail.com >
Signed-off-by: Jim Robinson <jim@croud.co.uk >
2019-05-15 15:11:18 -07:00
Harold Drost
a73e53019c
Detect current network and netmask ( #13250 )
...
* Detect current network and netmask
Previously the network was guessed (assumed it was a /24 by replacing the last octet with a 0) and then later the netmask was hardcoded to 255.255.240.0 as a result the requested route is almost always incorrect. As most people supply their own or use the vpn tunnel as a default gateway it's probably rare to cause any issues.
Signed-off-by: Harold Drost <baelish@bluecell.net >
* Removing unnecessary debug messages.
Signed-off-by: Harold Drost <baelish@bluecell.net >
* Actually fixing the thing it was all about... :$
My testing worked because helm believed the `openvpn.conf` unchanged and therefore didn't replace the manually edited file which had the change in this commit.
Tested using brand new deployment now works correctly and without routing errors.
Signed-off-by: Harold Drost <baelish@bluecell.net >
2019-04-25 10:22:47 -07:00
John Felten
dbeab9d1da
Update OWNERS ( #13121 )
...
* Update OWNERS
Signed-off-by: jfelten <john.felten@hbo.com >
* Update Chart.yaml
Signed-off-by: jfelten <john.felten@hbo.com >
2019-04-22 06:23:44 -07:00
Yaniv Oliver
e9b0beef05
[stable/openvpn] Updated notes to use logs command instead of deprecated log command ( #12170 )
...
* Updated OpenVPN chart notes to use logs command instead of deprecated log command
Signed-off-by: Yaniv Oliver <yanivoliver@gmail.com >
* Updated OpenVPN readme file with updated logs command
Signed-off-by: Yaniv Oliver <yanivoliver@gmail.com >
2019-03-13 18:56:22 -07:00
Jai Pradeesh
5bbf2df168
[stable/openvpn] Adds nodeSelector ( #9965 )
...
Signed-off-by: Jai <jai@deepsource.io >
2019-02-26 01:57:08 -08:00
Lyle Franklin
ef4e666253
Add configurable podAnnotations to openvpn chart ( #9835 )
...
* Add configurable `podAnnotations` to openvpn chart
Use case is using `ark` + `restic` to take backups which requires pods
with persistent data to be annotated like:
```
kubectl annotate pod openvpn-6cff5449-wl48k backup.ark.heptio.com/backup-volumes=certs
```
Signed-off-by: Lyle Franklin <lylejfranklin@gmail.com >
* Use toYaml helper in openvpn
Signed-off-by: Lyle Franklin <lylejfranklin@gmail.com >
2019-01-02 11:53:02 -08:00
irozet
9cfbfcbbfe
[stable/openvpn] adding ability to keep certificates in chart values ( #7916 )
...
* Additing an option to create extra route for Kubernetes service network
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
* bump chart version
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
* bump minor update version
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
* [stable/openvpn] fixing typo in openvpn.OVPN_K8S_SVC_SUBNET value name
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
* [stable/openvpn] fix openvpn.OVPN_K8S_SVC_NETWORK and openvpn.OVPN_K8S_SVC_SUBNET names in values.yaml
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
* [stable/openvpn] adding ability to keep certificates in chart values
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
* passing certificates in secret rather than values
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
* remove wrong values from from doc
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
* fix typo
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
2018-10-29 07:24:43 -07:00
Kevin Pullin
9e0261a6b0
OpenVPN NOTES.txt - Fix label key in the pod status command and add 'namespace' flag ( #8484 )
...
In `NOTES.txt`, the command to follow the pod's log has a label filter with the old `type` key instead of the new `app` key.
Additionally add a 'namespace' flag per https://github.com/helm/charts/pull/5817#discussion_r193873501
Signed-off-by: Kevin Pullin <kevin.pullin@gmail.com >
2018-10-15 15:11:26 -07:00
irozet
a99b192557
[stable/openvpn] fixing typo in OVPN_K8S_SVC_SUBNET property name ( #7503 )
...
* Additing an option to create extra route for Kubernetes service network
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
* bump chart version
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
* bump minor update version
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
* [stable/openvpn] fixing typo in openvpn.OVPN_K8S_SVC_SUBNET value name
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
* [stable/openvpn] fix openvpn.OVPN_K8S_SVC_NETWORK and openvpn.OVPN_K8S_SVC_SUBNET names in values.yaml
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
2018-09-23 11:12:39 -07:00
irozet
eb47ec71d5
Additing an option to create extra route for Kubernetes service network ( #7470 )
...
* Additing an option to create extra route for Kubernetes service network
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
* bump chart version
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
* bump minor update version
Signed-off-by: Irina Rozet <irina.rozet@ingrammicro.com >
2018-08-31 14:38:43 -07:00
ejether
21c58fe9af
replaced single line DOMAIN in openvpn config with multi-line DOMAIN-… ( #6258 )
...
* replaced single line DOMAIN in openvpn config with multi-line DOMAIN-SEARCH to make it work with Mac OSX and tunnelblick
* Update Chart.yaml
2018-07-02 13:07:18 -07:00
jakemccloskey
dc3c22f108
[stable/openvpn] Fixes for client config file ( #6285 )
...
* Remove dh params from client config. Unwrap remote config.
* Bump version.
2018-06-26 19:55:20 -07:00
Jonathan Meyers
38a1c98ed1
[stable/openvpn] added ability to configure LoadBalancerSourceRanges ( #5989 )
...
* added ability to restrict LoadBalancerSourceRanges
* Bumped Chart version
* Bump minor version for new feature
* Update Chart.yaml
2018-06-17 09:01:30 -07:00
Dan Wendorf
467c075fce
[stable/openvpn] Configurable update strategy ( #5970 )
2018-06-17 06:38:30 -07:00
Dan Wendorf
f4223aed8a
[stable/openvpn] Remove old README config for chart values ( #5646 )
...
When #5174 was merged, it brought back parts of the README that were
changed in #5489 , resulting in unintentional duplicate documentation of chart
values.
2018-05-24 12:59:32 -07:00
Dan Wendorf
6489136aef
[stable/openvpn] Optionally remove redirect-gateway config ( #5174 )
...
* [stable/openvpn] Optionally remove redirect-gateway config
It's not always desirable to have all traffic redirect over the VPN
* Update Chart.yaml
2018-05-17 21:43:51 -07:00
Valerio Coltrè
b552477505
Enhance openvpn chart ( #5489 )
...
* openvpn: annotate config sha, to reboot services on configuration change
* openvpn: add externalIP support
* openvpn: remove default nodeport, that way it's auto-assigned
* openvpn: configuration revamp
* openvpn: removed non-working script
* openvpn: configuration reword
* openvpn: explicitly suggested how to disable kube-dns bridge
* openvpn: subPath is now optional
2018-05-17 11:05:51 -07:00
Dan Wendorf
1da75ed746
[stable/openvpn] Custom annotations for service ( #5173 )
...
* [stable/openvpn] Custom annotations for service
Allows, for example, specifying a custom domain name to external-dns.
* Update values.yaml
2018-05-11 01:08:04 -07:00
Dan Wendorf
ef78db8024
[stable/openvpn] README scripts reflect new labels ( #5402 )
...
- Update readme instructions to work with the new labels introduced in
3.0.0.
- Quote bash variables to avoid word splitting
2018-05-09 23:46:53 -07:00
Dan Wendorf
5cef3e39fd
[stable/openvpn] Add option to remove dhcp-option DOMAIN ( #5404 )
...
* [stable/openvpn] Add option to remove `dhcp-option DOMAIN`
Not all VPN clients support this option, so having the option to remove
it can prevent errors on client connections.
* Update Chart.yaml
2018-05-09 15:38:53 -07:00
Christian Budde Christensen
b3dc4326b5
Add loadBalancerIP to OpenVPN ( #5389 )
2018-05-09 15:23:03 -07:00
Dan Wendorf
82d3c6f8d6
[stable/openvpn] service label selector match pod ( #5460 )
...
Fixes #5455
2018-05-09 13:14:52 -07:00
Dan Wendorf
fbea3c479a
[stable/openvpn] Update resource labels to latest best practices ( #5175 )
...
- All resources directly created have `app`, `chart`, `release`, and `heritage`
- Because deployment pod selectors are immutable in API version apps/v1,
openvpn deployment pods no longer have chart version in `chart` to
allow updating.
2018-05-04 09:13:52 -07:00
AdamDang
db51c84fe0
Add appVersion key for openvpn ( #4691 )
...
The key "appVersion" is needed for ci testing, it's missing in this yaml. That sometimes will cause testing failure.
2018-04-04 18:07:08 -07:00
Alex Chistyakov
8b9f1b7ec5
Add a possibility to configure nodePort explicitly for OpenVPN ( #3977 )
...
* Add a possibility to configure nodePort explicitly for OpenVPN
* Version bump
* Check if .Values.service.type is "NodePort"
* Document the nodePort setting
2018-03-30 13:17:03 -07:00
Matt Farina
0bb92f96fe
Adding OWNERS file for openvpn chart
2017-12-13 15:14:21 -05:00
Alexandre Cartapanis
59579658de
Supports for existing volume claim ( #2984 )
...
Supports for existing volume claim
2017-12-11 17:38:19 +01:00
Kevin Schumacher
141e870866
[stable/openvpn] #1785 namespace defined templates with chart name ( #2168 )
2017-10-11 16:55:43 +05:30
Guang Ya Liu
1ff58eef78
[stable/openvpn] Use storageClassName for openvpn. ( #2018 )
2017-09-10 11:17:14 -05:00
John Felten
ce8a20e0b3
Update README.md ( #1907 )
2017-09-04 15:59:00 -05:00
Micah Hausler
78e1ce860c
OpenVPN chart fixes ( #1541 )
...
* [stable/openvpn] Fixed emptyDir indentation
* [stable/openvpn] Added namespacing to components
* [stable/openvpn] Added arbitrary openvpn configuration
* [stable/openvpn] Added instructions for use with AWS
* Indent commands listed in NOTES.txt
2017-07-28 12:36:40 +05:30
Frederic Hemberger
912f50c716
Use consistent whitespace in template placeholders ( #1437 )
...
Use consistent whitespace in template placeholders
2017-07-09 21:11:24 +02:00
John Felten
86ce997b70
[stable/openvpn] added persistent volumes for openvpn certs ( #526 )
...
* added persistent volumes for openvpn certs
* PR-526 review changes
* bumping version per review comments
* made variable capitalization consistent per review comments
* updated image tag
2017-05-10 14:49:39 -07:00
Paulo Rafael Feodrippe
010aa1ed3b
Use stable repository for openvpn chart ( #963 )
...
This chart is not at incubator repo
2017-05-04 10:21:53 -07:00
Victor Quinn
91dcfc9e94
[stable/openvpn] Fix formatting and typos ( #864 )
...
* [stable/openvpn] Fix formatting and typos
* bump version
2017-04-06 11:30:05 +01:00
Dave Parfitt
c63b456c37
update formatting in OpenVPN chart README ( #720 )
2017-03-16 22:16:54 -07:00
Reinhard Nägele
efda2e10f7
[stable/openvpn] Remove helm.sh/created annotations ( #506 )
...
* [stable/openvpn] Remove helm.sh/created annotations
* openvpn: bump version to 0.1.1
2017-01-27 14:23:22 -08:00