kube-openvpn 0.2.2

Security fix:

• Only route to pod and service CIDRs by default (#18 #17)

Set the OVPN_DEFROUTE environment variable to 1 to masquerade all packets coming from the VPN network.

kube-openvpn 0.2.1

Minor bugfixes.

Adds $OVPN_VERB option to configure openvpn verbosity.

kube-openvpn 0.2.0

Reimplemented client portforwarding. Usage: https://github.com/pieterlange/kube-openvpn#routing-back-to-the-client

Features:

• Load portwarding rules from configmap

Fixes:

• Load search domain from correct environment variable
• Put forwarding rules in specific iptables chain

First release

Refer to README.md for setup instructions.

Features:

• Stateless kubernetes pod
• PKI infrastructure independently managed
• Clients use kube-dns as DNS resolver
• Route traffic to kubernetes services and pods
• Route traffic from VPN pod IP back to VPN clients
• openvpn.conf templating
• Client certificate revocation

TODO:

• more documentation