From e9f78e91ab45e8099b8c5e2f8d32aa8673a7fae3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?B=E1=B4=87=CA=80=C9=B4=E1=B4=85=20S=E1=B4=84=CA=9C?=
 =?UTF-8?q?=E1=B4=8F=CA=80=C9=A2=E1=B4=87=CA=80s?= <me@bjw-s.dev>
Date: Mon, 7 Jun 2021 12:13:54 +0200
Subject: [PATCH] [vpn-gateway] Update values
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Bᴇʀɴᴅ Sᴄʜᴏʀɢᴇʀs <me@bjw-s.dev>
---
 charts/stable/pod-gateway/values-test.yaml | 71 ++++++++++++++++++++++
 1 file changed, 71 insertions(+)
 create mode 100644 charts/stable/pod-gateway/values-test.yaml

diff --git a/charts/stable/pod-gateway/values-test.yaml b/charts/stable/pod-gateway/values-test.yaml
new file mode 100644
index 00000000..7a6f252d
--- /dev/null
+++ b/charts/stable/pod-gateway/values-test.yaml
@@ -0,0 +1,71 @@
+image:
+  repository: ghcr.io/k8s-at-home/pod-gateway
+  tag: v1.2.5
+
+routed_namespaces: []
+# - downloads
+
+settings:
+  # tun0 for openvpn, wg0 for wireguard
+  VPN_INTERFACE: wg0
+  # Prevent non VPN traffic to leave the gateway
+  VPN_BLOCK_OTHER_TRAFFIC: true
+  # If VPN_BLOCK_OTHER_TRAFFIC is true, allow VPN traffic over this port
+  VPN_TRAFFIC_PORT: 51820
+  # Traffic to these IPs will be send through the K8S gateway
+  # change if your K8S cluster or home network uses a different CIDR
+  VPN_LOCAL_CIDRS: "${NETWORK_K8S_CLUSTER_CIDR} ${NETWORK_K8S_SERVICE_CIDR} ${NETWORK_MANAGEMENT_CIDR}"
+
+addons:
+  vpn:
+    enabled: true
+    type: wireguard
+
+    wireguard:
+      image:
+        repository: ghcr.io/k8s-at-home/wireguard
+        tag: v1.0.20210424
+        pullPolicy: IfNotPresent
+
+    securityContext:
+      runAsUser: 568
+      runAsGroup: 568
+
+    env:
+      TZ: "Europe/Amsterdam"
+
+    configFileSecret: vpn-gateway-vpnconfig
+
+    resources:
+      requests:
+        cpu: "0.001"
+        memory: 128Mi
+      limits:
+        memory: 512Mi
+
+    networkPolicy:
+      enabled: true
+
+      egress:
+      - to:
+        - ipBlock:
+            cidr: 0.0.0.0/0
+        ports:
+        # VPN traffic port - change if your provider uses a different port
+        - port: 51820
+          protocol: UDP
+      - to:
+          # Allow traffic within K8S - change if your K8S cluster uses a different CIDR
+        - ipBlock:
+            cidr: 10.0.0.0/8
+
+    # livenessProbe:
+    #   exec:
+    #     # In the example bellow the VPN output is in Belgic (BE) - change appropiatly
+    #     command:
+    #       - sh
+    #       - -c
+    #       - if [ $(wget -q -O- https://ipinfo.io/country) == 'BE' ]; then exit 0; else exit $?; fi
+    #   initialDelaySeconds: 30
+    #   periodSeconds: 60
+    #   failureThreshold: 1