Add vpn-gateway

cluster/core/networking/kustomization.yaml

@@ -3,4 +3,5 @@ kind: Kustomization
 resources:
 - ./traefik
 - ./calico
-- ./metallb
+- ./metallb
+- ./vpn-gateway

cluster/core/networking/vpn-gateway/helm-release.yaml

@@ -0,0 +1,23 @@
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: vpn-gateway
+  namespace: vpn-gateway
+  labels:
+spec:
+  interval: 5m
+  chart:
+    spec:
+      # renovate: registryUrl=https://k8s-at-home.com/charts/
+      chart: pod-gateway
+      version: 2.0.0
+      sourceRef:
+        kind: HelmRepository
+        name: k8s-at-home-charts
+        namespace: flux-system
+      interval: 5m
+
+  # See https://github.com/k8s-at-home/charts/blob/master/charts/pod-gateway/values.yaml
+  values:
+    routed_namespaces:
+    - vpn

cluster/core/networking/vpn-gateway/helm-repository.yaml

@@ -0,0 +1,8 @@
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: HelmRepository
+metadata:
+  name: k8s-at-home-charts
+  namespace: flux-system
+spec:
+  interval: 1m
+  url: https://k8s-at-home.com/charts/

cluster/core/networking/vpn-gateway/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- ./namespace.yaml
+- ./helm-repository.yaml
+- ./helm-release.yaml

cluster/core/networking/vpn-gateway/namespace.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: vpn
+  labels:
+    routed-gateway: "true"
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: vpn-gateway