Skip to content

OpenVPN

Overview

To ensure secure, encrypted access to Kubernetes clusters, KubeDNA integrates OpenVPN as a standard component in every deployed environment. This ensures secure communication between users and the Kubernetes control plane, especially for private and on-premise deployments.

✅ Architecture

In KubeDNA, OpenVPN is not automatically deployed as part of the base cluster installation.

  • Every KubeDNA cluster includes its own isolated OpenVPN server instance.
  • This instance runs within the cluster and is preconfigured to only allow access to that specific cluster.
  • VPN is integrated at the networking layer to restrict API access to authenticated VPN users only, enhancing security.

👤 Per-User Configuration Access

Each user that has access to a KubeDNA cluster can download their own personalized OpenVPN configuration file via the UI:

Path:
Selected Cluster > Access & Security > Download VPN Config

  • Configuration files are pre-generated with unique client certificates and keys.
  • Users can connect securely to the cluster using standard OpenVPN clients (Windows, macOS, Linux).
  • Easy integration with team management and identity providers for scalable access control.

🔒 Security & Compliance

  • TLS encryption between client and server.
  • Certificate-based authentication ensures strong identity enforcement.
  • VPN logs and connection records are available for auditing purposes.
  • IP whitelisting and usage control via KubeDNA’s access policies.