vpn-gateway helm

No introduction found. Create it?

Install

Install with:

helm repo add angelnu-charts https://angelnu.github.io/helm-charts/
helm install vpn-gateway angelnu-charts/pod-gateway -f values.yaml

Examples

See examples from other people.

Top Repositories (1 out of 6)

NameRepoStarsVersionTimestamp
vpn-gatewayh3mmy/bloopySphere636.5.12 months ago

Values

See the most popular values for this chart:

KeyTypes
routed_namespaces[] (6)
- media
string
settings.NOT_ROUTED_TO_GATEWAY_CIDRS (6)
10.0.0.0/8 172.16.0.0/12 192.168.0.0/16
string
settings.VPN_BLOCK_OTHER_TRAFFIC (6)
true
boolean
settings.VPN_INTERFACE (6)
wg0
string
settings.VPN_LOCAL_CIDRS (6)
10.0.0.0/8 172.16.0.0/12 192.168.0.0/16
string
settings.VPN_TRAFFIC_PORT (6)
${PIA_VPN_PORT}
string, number
settings.VXLAN_ID (2)
43
number
settings.VXLAN_IP_NETWORK (2)
172.16.1
string
settings.DNS_LOCAL_CIDRS (1)
local ${DOMAIN_BIG_BLOOP} ${DOMAIN_BIG_BLOOP} ${DOMAIN_CORE_BLOOP}
string
settings.GATEWAY_ENABLE_DNSSEC (1)
false
boolean
settings.IPTABLES_NFT (1)
yes
string
settings.VXLAN_PORT (1)
4789
number
webhook.gatewayDefault (6)
false
boolean
webhook.gatewayAnnotation (5)
setGateway
string
webhook.gatewayLabel (5)
setGateway
string
webhook.namespaceSelector.label (5)
vpn-routed-gateway
string
webhook.namespaceSelector.type (2)
label
string
webhook.namespaceSelector.custom.matchExpressions[].key (1)
kubernetes.io/metadata.name
string
webhook.namespaceSelector.custom.matchExpressions[].operator (1)
In
string
webhook.namespaceSelector.custom.matchExpressions[].values[] (1)
- downloads
string
webhook.image.repository (3)
ghcr.io/angelnu/gateway-admision-controller
string
webhook.image.tag (3)
v3.10.0@sha256:a8ed630613de277244dfe203cd11d05905d7eeba8d8c41e399b02ee9a847b2f5
string
webhook.gatewayAnnotationValue (1)
true
string
webhook.sidecarAsInit (1)
false
boolean
publicPorts[].hostname (5)
qbittorrent
string
publicPorts[].IP (5)
10
number
publicPorts[].ports[].port (5)
${BITTORRENT_PORT}
${BITTORRENT_PORT}
string, number
publicPorts[].ports[].type (5)
udp
tcp
string
addons.vpn.enabled (4)
true
boolean
addons.vpn.envFrom[].secretRef.name (4)
vpn-gateway-config
string
addons.vpn.gluetun.image.repository (4)
docker.io/qmcgaw/gluetun
string
addons.vpn.gluetun.image.tag (4)
v3.41.3
string
addons.vpn.type (4)
gluetun
string
addons.vpn.env[].name (3)
VPN_SERVICE_PROVIDER
VPN_TYPE
VPN_INTERFACE
FIREWALL
DOT
SERVER_CITIES
FIREWALL_VPN_INPUT_PORTS
VPN_ENDPOINT_PORT
DNS_ADDRESS
string
addons.vpn.env[].value (3)
mullvad
wireguard
wg0
off
off
Chicago IL
${VPN_FORWARDED_PORT_1},${VPN_FORWARDED_PORT_2}
${VPN_GATEWAY_VPN_PORT}
${SVC_KUBE_DNS_V4}
string
addons.vpn.resources.limits.memory (3)
128M
string
addons.vpn.resources.requests.cpu (3)
5m
string
addons.vpn.resources.requests.memory (3)
64M
string
addons.vpn.securityContext.capabilities.add[] (3)
- NET_ADMIN
string
addons.vpn.securityContext.privileged (1)
true
boolean
addons.vpn.networkPolicy.egress[].ports[].port (2)
${VPN_GATEWAY_VPN_PORT}
${VPN_GATEWAY_VPN_PORT}
53
string, number
addons.vpn.networkPolicy.egress[].ports[].protocol (2)
UDP
TCP
UDP
string
addons.vpn.networkPolicy.egress[].to[].ipBlock.cidr (2)
0.0.0.0/0
${NETWORK_K8S_CLUSTER_CIDR}
${NETWORK_K8S_SERVICE_CIDR}
string
addons.vpn.networkPolicy.enabled (2)
false
boolean
addons.vpn.env.DOT (1)
off
string
addons.vpn.env.FIREWALL_ENABLED_DISABLING_IT_SHOOTS_YOU_IN_YOUR_FOOT (1)
off
string
addons.vpn.env.HTTP_CONTROL_SERVER_ADDRESS (1)
:80
string
addons.vpn.env.HTTP_CONTROL_SERVER_LOG (1)
off
string
addons.vpn.env.PUBLICIP_API (1)
ip2location
string
addons.vpn.env.SERVER_COUNTRIES (1)
Netherlands
string
addons.vpn.env.SERVER_REGIONS (1)
Europe
string
addons.vpn.env.TZ (1)
${TIMEZONE}
string
addons.vpn.env.VPN_INTERFACE (1)
wg0
string
addons.vpn.env.VPN_SERVICE_PROVIDER (1)
airvpn
string
addons.vpn.env.VPN_TYPE (1)
wireguard
string
addons.vpn.env.WIREGUARD_MTU (1)
1320
number
addons.vpn.livenessProbe.exec.command[] (1)
- sh
- -c
- if [ '$(wget -q -O- https://ipinfo.io/country)' == 'NO' ]; then echo 'NO'; else echo 'not NO'; fi
string
addons.vpn.livenessProbe.failureThreshold (1)
3
number
addons.vpn.livenessProbe.initialDelaySeconds (1)
30
number
addons.vpn.livenessProbe.periodSeconds (1)
60
number
addons.netshoot.enabled (2)
true
boolean
addons.netshoot.networkPolicy.egress[].to[].ipBlock.cidr (1)
10.0.0.0/8
192.168.1.0/24
string
addons.netshoot.networkPolicy.enabled (1)
true
boolean
addons.netshoot.resources.limits.memory (1)
10M
string
addons.netshoot.resources.requests.cpu (1)
5m
string
addons.netshoot.resources.requests.memory (1)
10M
string
image.tag (4)
v1.11.1@sha256:0617304f085bc98529f0c5cd0c40c63bb019380a026a277c812bd13f78b4bc5d
string
image.repository (3)
ghcr.io/angelnu/pod-gateway
string
controllers.main.containers.gluetun.dependsOn (2)
main
string
controllers.main.containers.gluetun.enabled (2)
true
boolean
controllers.main.containers.gluetun.env[].name (2)
VPN_SERVICE_PROVIDER
VPN_INTERFACE
VPN_ENDPOINT_PORT
OPENVPN_PROTOCOL
FIREWALL_ENABLED_DISABLING_IT_SHOOTS_YOU_IN_YOUR_FOOT
DOT
OPENVPN_ENDPOINT_IP
DNS_SERVER
DNS_UPSTREAM_RESOLVER_TYPE
DNS_UPSTREAM_PLAIN_ADDRESSES
string
controllers.main.containers.gluetun.env[].value (2)
private internet access
tun0
${PIA_VPN_PORT}
udp
off
off
173.239.198.18
off
plain
1.1.1.1:53
string
controllers.main.containers.gluetun.envFrom[].secretRef.name (2)
private-internet-access-openvpn
string
controllers.main.containers.gluetun.image.repository (2)
ghcr.io/qdm12/gluetun
string
controllers.main.containers.gluetun.image.tag (2)
v3.41.3@sha256:fa19cc76b2af13d57a8d3dc3066f2ada061b1c761b8aecf989b3877c0486e027
string
controllers.main.containers.gluetun.probes.liveness.custom (2)
true
boolean
controllers.main.containers.gluetun.probes.liveness.enabled (2)
true
boolean
controllers.main.containers.gluetun.probes.liveness.spec.exec.command[] (2)
- sh
- -c
- if [ $(wget -q -O- http://ip-api.com/line/?fields=city) == 'Seattle' ]; then exit 0; else exit $?; fi
string
controllers.main.containers.gluetun.probes.liveness.spec.failureThreshold (2)
3
number
controllers.main.containers.gluetun.probes.liveness.spec.initialDelaySeconds (2)
30
number
controllers.main.containers.gluetun.probes.liveness.spec.periodSeconds (2)
60
number
controllers.main.containers.gluetun.probes.liveness.spec.timeoutSeconds (1)
15
number
controllers.main.containers.gluetun.resources.limits.memory (1)
192Mi
string
controllers.main.containers.gluetun.resources.requests.cpu (1)
100m
string
controllers.main.containers.gluetun.resources.requests.memory (1)
64Mi
string
controllers.main.containers.gluetun.securityContext.capabilities.add[] (1)
- NET_ADMIN
string
controllers.main.containers.gluetun.securityContext.privileged (1)
true
boolean
controllers.main.containers.main.image.repository (1)
ghcr.io/angelnu/pod-gateway
string
controllers.main.containers.main.image.tag (1)
v1.13.0@sha256:a5b032e15f7570493977b330a5a86dcffebb807d35685ad803e47afb62d105f2
string
controllers.main.initContainers.update-servers.command[] (1)
- /gluetun-entrypoint
- update
- -providers
- private internet access
- -minratio
- "0.75"
string
controllers.main.initContainers.update-servers.env[].name (1)
UPDATER_PREFER_DIRECT_DOWNLOAD
string
controllers.main.initContainers.update-servers.env[].value (1)
on
string
controllers.main.initContainers.update-servers.image.repository (1)
docker.io/qmcgaw/gluetun
string
controllers.main.initContainers.update-servers.image.tag (1)
latest@sha256:c2ee4191762fca6b6a3c3359a731198a95d9c9af4db32d466e223bf3a84e779b
string
controllers.main.pod.annotations."configmap.reloader.stakater.com/reload" (1)
vpn-gateway-pod-gateway
string
controllers.main.pod.annotations."secret.reloader.stakater.com/reload" (1)
vpn-gateway-pod-gateway
string
controllers.webhook.containers.main.image.repository (1)
ghcr.io/angelnu/gateway-admision-controller
string
controllers.webhook.containers.main.image.tag (1)
dev@sha256:17e9bc66f9ccaa004db53dd9e55247e2da37c6912a251c36b33fab3a283a8d42
string
DNS (2)
1.1.1.1
string
persistence.dnssec-trust-anchors.name (2)
{{ include "bjw-s.common.lib.chart.names.fullname" . }}-dnssec-trust-anchors
string
persistence.dnssec-trust-anchors.type (2)
configMap
string
persistence.dnssec-trust-anchors.advancedMounts.main.main[].path (1)
/usr/share/dnsmasq
string
persistence.dnssec-trust-anchors.enabled (1)
true
boolean
persistence.dnssec-trust-anchors.mountPath (1)
/usr/share/dnsmasq/trust-anchors.conf
string
persistence.dnssec-trust-anchors.readOnly (1)
true
boolean
persistence.dnssec-trust-anchors.subPath (1)
trust-anchors.conf
string
persistence.gluetun-servers-dir.accessMode (1)
ReadWriteOnce
string
persistence.gluetun-servers-dir.advancedMounts.main.gluetun[].path (1)
/gluetun
string
persistence.gluetun-servers-dir.advancedMounts.main.update-servers[].path (1)
/gluetun
string
persistence.gluetun-servers-dir.retain (1)
true
boolean
persistence.gluetun-servers-dir.size (1)
1Gi
string
persistence.gluetun-servers-dir.storageClass (1)
longhorn
string
persistence.gluetun-servers-dir.type (1)
persistentVolumeClaim
string
clusterName (1)
cluster.local
string
configMaps.dnssec-trust-anchors.data."trust-anchors.conf" (1)
# IANA root DNSSEC DS trust anchors, verified 2026-10-23. # https://data.iana.org/root-anchors/root-anchors.xml # Verified with IANA's root-anchors.p7s and icannbundle.pem. # Review https://www.iana.org/dnssec/files before future rollovers. # KSK-2017 remains published during the rollover transition. trust-anchor=.,20326,8,2,E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D # KSK-2024 signs the root DNSKEY RRset starting 2026-10-11. trust-anchor=.,38696,8,2,683D2D0ACB8C9B712A1948B27F741219298D0A450D612C483AF444A4C0FB2B16
string
configMaps.dnssec-trust-anchors.enabled (1)
true
boolean
DNSPolicy (1)
None
string
env.TZ (1)
${TZ}
string
global.fullnameOverride (1)
vpn-gateway
string
livenessProbe.exec.command[] (1)
- sh
- -c
- if [ $(curl -s https://am.i.mullvad.net/country) = '${VPN_COUNTRY}' ]; then exit 0; else exit $?; fi
string
livenessProbe.failureThreshold (1)
1
number
livenessProbe.initialDelaySeconds (1)
30
number
livenessProbe.periodSeconds (1)
60
number
networkpolicies.main.enabled (1)
false
boolean
podAnnotations."configmap.reloader.stakater.com/reload" (1)
vpn-gateway
string
podAnnotations."reloader.stakater.com/auto" (1)
true
string
podAnnotations."secret.reloader.stakater.com/reload" (1)
vpn-gateway
string