{"action":"closed","issue":{"url":"https://api.github.com/repos/helm/charts/issues/9080","repository_url":"https://api.github.com/repos/helm/charts","labels_url":"https://api.github.com/repos/helm/charts/issues/9080/labels{/name}","comments_url":"https://api.github.com/repos/helm/charts/issues/9080/comments","events_url":"https://api.github.com/repos/helm/charts/issues/9080/events","html_url":"https://github.com/helm/charts/issues/9080","id":378418545,"node_id":"MDU6SXNzdWUzNzg0MTg1NDU=","number":9080,"title":"[stable/openvpn] Successfully connect, but no DNS","user":{"login":"jonasrmichel","id":553468,"node_id":"MDQ6VXNlcjU1MzQ2OA==","avatar_url":"https://avatars0.githubusercontent.com/u/553468?v=4","gravatar_id":"","url":"https://api.github.com/users/jonasrmichel","html_url":"https://github.com/jonasrmichel","followers_url":"https://api.github.com/users/jonasrmichel/followers","following_url":"https://api.github.com/users/jonasrmichel/following{/other_user}","gists_url":"https://api.github.com/users/jonasrmichel/gists{/gist_id}","starred_url":"https://api.github.com/users/jonasrmichel/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jonasrmichel/subscriptions","organizations_url":"https://api.github.com/users/jonasrmichel/orgs","repos_url":"https://api.github.com/users/jonasrmichel/repos","events_url":"https://api.github.com/users/jonasrmichel/events{/privacy}","received_events_url":"https://api.github.com/users/jonasrmichel/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-11-07T18:41:55Z","updated_at":"2018-11-12T16:50:54Z","closed_at":"2018-11-12T16:50:54Z","author_association":"NONE","body":"<!-- Thanks for filing an issue! Before hitting the button, please answer these questions. It's helpful to search the existing GitHub issues first. It's likely that another user has already reported the issue you're facing, or it's a known issue that we're already aware of-->\r\n\r\n**Is this a request for help?**:\r\nYes, diagnostic help would be much appreciated.\r\n---\r\n\r\n**Is this a BUG REPORT or FEATURE REQUEST?** (choose one):\r\n\r\n<!--\r\nIf this is a BUG REPORT, please:\r\n  - Fill in as much of the template below as you can.  If you leave out\r\n    information, we can't help you as well.\r\n\r\nIf this is a FEATURE REQUEST, please:\r\n  - Describe *in detail* the feature/behavior/change you'd like to see.\r\n\r\nIn both cases, be ready for followup questions, and please respond in a timely\r\nmanner.  If we can't reproduce a bug or think a feature already exists, we\r\nmight close your issue.  If we're wrong, PLEASE feel free to reopen it and\r\nexplain why.\r\n-->\r\nBug report, though likely user error (custom configuration required I expect).\r\n\r\n**Version of Helm and Kubernetes**:\r\n```\r\n$ helm version\r\nClient: &version.Version{SemVer:\"v2.11.0\", GitCommit:\"2e55dbe1fdb5fdb96b75ff144a339489417b146b\", GitTreeState:\"clean\"}\r\nServer: &version.Version{SemVer:\"v2.11.0\", GitCommit:\"2e55dbe1fdb5fdb96b75ff144a339489417b146b\", GitTreeState:\"clean\"}\r\n\r\n$ kubectl version\r\nClient Version: version.Info{Major:\"1\", Minor:\"11\", GitVersion:\"v1.11.2\", GitCommit:\"bb9ffb1654d4a729bb4cec18ff088eacc153c239\", GitTreeState:\"clean\", BuildDate:\"2018-08-07T23:17:28Z\", GoVersion:\"go1.10.3\", Compiler:\"gc\", Platform:\"linux/amd64\"}\r\nServer Version: version.Info{Major:\"1\", Minor:\"11\", GitVersion:\"v1.11.2\", GitCommit:\"bb9ffb1654d4a729bb4cec18ff088eacc153c239\", GitTreeState:\"clean\", BuildDate:\"2018-08-07T23:08:19Z\", GoVersion:\"go1.10.3\", Compiler:\"gc\", Platform:\"linux/amd64\"}\r\n```\r\n\r\n**Which chart**:\r\n[stable/openvpn](https://github.com/helm/charts/tree/master/stable/openvpn) (3.10.0)\r\n\r\n**What happened**:\r\n- Deployed the stable/openvpn (3.10.0) chart with default values to a multi-availability-zone AWS cluster\r\n- After creating a new client cert, am able to successfully connect\r\n- After connecting, no DNS servers available\r\n  - Able to ping the openvpn pod, but nothing else\r\n\r\n**What you expected to happen**:\r\n- Create a new client cert\r\n- Connect to OpenVPN server using cert\r\n- Network access to both cluster VPC and public internet\r\n\r\n**How to reproduce it** (as minimally and precisely as possible):\r\n- Cluster setup\r\n  - [kops 1.11.0-alpha.1](https://github.com/kubernetes/kops/releases/tag/1.11.0-alpha.1)\r\n  - AWS\r\n  - Single region, multiple availability zones (3)\r\n- stable/openvpn 3.10.0 chart with default values installed within `default` namespace\r\n- create new client cert following stable/openvpn [Usage instructions](https://github.com/helm/charts/tree/master/stable/openvpn#usage)\r\n- connect to VPN using client cert\r\n- ping the openvpn pod (success)\r\n- ping any other pod in the cluster (failure)\r\n- ping a public domain (failure)\r\n- `nslookup` public domain (timeout)\r\n\r\n**Anything else we need to know**:\r\n- Reproduced on Windows (Viscosity client), Linux (OpenVPN client), and MacOS (Tunnelblick client) with the same OpenVPN client cert\r\n- Reproduced with older version of the stable/openvpn chart (e.g., 2.0.2 which pushes a single `DOMAIN` `dhcp-option` versus one `DOMAIN_SEARCH` per host in `/etc/resolv.conf`)"}}
{"actor":{"display_login":"jonasrmichel"}}