Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2025-04-22 16:19:19 -04:00
Code Issues Packages Projects Releases Wiki Activity

dev-docs: add 'things to try' section to VPN howto

Browse Source
This commit is contained in:
Markus Rudy 2023-11-24 11:38:54 +01:00
parent 2d3996d5b3
commit 900b7f0077
1 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
dev-docs/howto/vpn/helm/README.md
View File

@ -18,6 +18,20 @@ This Helm chart deploys a VPN server to your Constellation cluster.
3. Follow the post-installation instructions displayed by the CLI.
## Things to try
Ask CoreDNS about its own service IP:
```sh
dig +notcp @10.96.0.10 kube-dns.kube-system.svc.cluster.local
```
Ask the Kubernetes API server about its wellbeing:
```sh
curl --insecure https://10.96.0.1:6443/healthz
```
## Architecture
The VPN server is deployed as a `StatefulSet` to the cluster. It hosts the VPN frontend component, which is responsible for relaying traffic between the pod and the on-prem network, and the routing components that provide access to Constellation resources. The frontend supports IPSec and Wireguard.