Skip to content

Conversation

@paddyoneill
Copy link
Collaborator

Update controller to write peer configs to a secret named <wireguard>-peer-configs. Each peer config is stored as a key / value pair using the peer's name as the key.

$ kubectl get secret/test-vpn-peer-configs -o jsonpath='{.data.my-peer}' | base64 -d

[Interface]
PrivateKey = ...
Address = 10.8.0.3
DNS = 10.96.0.10, default.svc.cluster.local


[Peer]
PublicKey = RTNaw+NHkHZEMDnt65d9sKBFPuGwrnN7Oj683nqLP2s=
AllowedIPs = 10.8.0.0/24,172.16.0.0/12,192.168.101.0/24
EndPoint = 172.16.12.5:51820

Removes the config template from the wireguard peer status.

@paddyoneill paddyoneill merged commit 091f8a7 into main Sep 2, 2024
@paddyoneill paddyoneill deleted the feature/write-peer-config-to-secret branch September 2, 2024 10:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants