Kubernetes network hub/router pod











up vote
0
down vote

favorite












I am looking for a way to be able to have a centralized pod for a namespace that all other pods connect to for their network routing. To clarify, the scenario I am looking to achieve is to have a container/pod that has an OpenVPN connection to a site and all the other pods/services in the namespace go through that OpenVPN pod for their external network communication/routing so that they can be accessible only via the VPN.



I have gone through a portion of the k8s documentation, but I have not yet found anything that can help me achieve this. Ideally I would like to be able to implement this in any k8s environment without having to rework the images for the already existing deployments. Any Kubernetes gurus here that might have some insight on the matter? :)










share|improve this question
























  • For what exact purposes do you want to use OpenVPN? Also, isn't it an option to configure it on Nodes, to let containers use these settings.
    – Artem Golenyaev
    15 hours ago












  • @ArtemGolenyaev , OpenVPN is the chosen solution for the VPN tunnel based on the use case for the eventual solution. There are options to to run OpenVPN directly for the k8s cluster but then there would not be any room for diversity i.e. I want to achieve an environment where I can deploy certain applications in a namespace that communicates only via the VPN.
    – Martin Nikolaev Ivanov
    13 hours ago















up vote
0
down vote

favorite












I am looking for a way to be able to have a centralized pod for a namespace that all other pods connect to for their network routing. To clarify, the scenario I am looking to achieve is to have a container/pod that has an OpenVPN connection to a site and all the other pods/services in the namespace go through that OpenVPN pod for their external network communication/routing so that they can be accessible only via the VPN.



I have gone through a portion of the k8s documentation, but I have not yet found anything that can help me achieve this. Ideally I would like to be able to implement this in any k8s environment without having to rework the images for the already existing deployments. Any Kubernetes gurus here that might have some insight on the matter? :)










share|improve this question
























  • For what exact purposes do you want to use OpenVPN? Also, isn't it an option to configure it on Nodes, to let containers use these settings.
    – Artem Golenyaev
    15 hours ago












  • @ArtemGolenyaev , OpenVPN is the chosen solution for the VPN tunnel based on the use case for the eventual solution. There are options to to run OpenVPN directly for the k8s cluster but then there would not be any room for diversity i.e. I want to achieve an environment where I can deploy certain applications in a namespace that communicates only via the VPN.
    – Martin Nikolaev Ivanov
    13 hours ago













up vote
0
down vote

favorite









up vote
0
down vote

favorite











I am looking for a way to be able to have a centralized pod for a namespace that all other pods connect to for their network routing. To clarify, the scenario I am looking to achieve is to have a container/pod that has an OpenVPN connection to a site and all the other pods/services in the namespace go through that OpenVPN pod for their external network communication/routing so that they can be accessible only via the VPN.



I have gone through a portion of the k8s documentation, but I have not yet found anything that can help me achieve this. Ideally I would like to be able to implement this in any k8s environment without having to rework the images for the already existing deployments. Any Kubernetes gurus here that might have some insight on the matter? :)










share|improve this question















I am looking for a way to be able to have a centralized pod for a namespace that all other pods connect to for their network routing. To clarify, the scenario I am looking to achieve is to have a container/pod that has an OpenVPN connection to a site and all the other pods/services in the namespace go through that OpenVPN pod for their external network communication/routing so that they can be accessible only via the VPN.



I have gone through a portion of the k8s documentation, but I have not yet found anything that can help me achieve this. Ideally I would like to be able to implement this in any k8s environment without having to rework the images for the already existing deployments. Any Kubernetes gurus here that might have some insight on the matter? :)







kubernetes vpn kubectl openvpn






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited 16 hours ago









Ivan Aracki

1,55432540




1,55432540










asked 18 hours ago









Martin Nikolaev Ivanov

153




153












  • For what exact purposes do you want to use OpenVPN? Also, isn't it an option to configure it on Nodes, to let containers use these settings.
    – Artem Golenyaev
    15 hours ago












  • @ArtemGolenyaev , OpenVPN is the chosen solution for the VPN tunnel based on the use case for the eventual solution. There are options to to run OpenVPN directly for the k8s cluster but then there would not be any room for diversity i.e. I want to achieve an environment where I can deploy certain applications in a namespace that communicates only via the VPN.
    – Martin Nikolaev Ivanov
    13 hours ago


















  • For what exact purposes do you want to use OpenVPN? Also, isn't it an option to configure it on Nodes, to let containers use these settings.
    – Artem Golenyaev
    15 hours ago












  • @ArtemGolenyaev , OpenVPN is the chosen solution for the VPN tunnel based on the use case for the eventual solution. There are options to to run OpenVPN directly for the k8s cluster but then there would not be any room for diversity i.e. I want to achieve an environment where I can deploy certain applications in a namespace that communicates only via the VPN.
    – Martin Nikolaev Ivanov
    13 hours ago
















For what exact purposes do you want to use OpenVPN? Also, isn't it an option to configure it on Nodes, to let containers use these settings.
– Artem Golenyaev
15 hours ago






For what exact purposes do you want to use OpenVPN? Also, isn't it an option to configure it on Nodes, to let containers use these settings.
– Artem Golenyaev
15 hours ago














@ArtemGolenyaev , OpenVPN is the chosen solution for the VPN tunnel based on the use case for the eventual solution. There are options to to run OpenVPN directly for the k8s cluster but then there would not be any room for diversity i.e. I want to achieve an environment where I can deploy certain applications in a namespace that communicates only via the VPN.
– Martin Nikolaev Ivanov
13 hours ago




@ArtemGolenyaev , OpenVPN is the chosen solution for the VPN tunnel based on the use case for the eventual solution. There are options to to run OpenVPN directly for the k8s cluster but then there would not be any room for diversity i.e. I want to achieve an environment where I can deploy certain applications in a namespace that communicates only via the VPN.
– Martin Nikolaev Ivanov
13 hours ago

















active

oldest

votes











Your Answer






StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














 

draft saved


draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53370926%2fkubernetes-network-hub-router-pod%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown






























active

oldest

votes













active

oldest

votes









active

oldest

votes






active

oldest

votes
















 

draft saved


draft discarded



















































 


draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53370926%2fkubernetes-network-hub-router-pod%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

Saint-Aignan (Tarn-et-Garonne)

Volksrepublik China

How to test boost logger output in unit testing?