<p><strong>Setup</strong></p>
<p>I have two clusters, one managed on digitalocean (prod) and one managed on aws (test).</p>
<p>DO cluster IP4 CIDR: 10.245.0.0/16</p>
<p>AWS cluster IP4 CIDR: 10.100.0.0/16</p>
<p>The one on digital ocean has cluster domain</p>
<blockquote>
<p>.svc.cluster.local</p>
</blockquote>
<p>and the one on aws has cluster domain</p>
<blockquote>
<p>.svc.cluster.test</p>
</blockquote>
<p>I have CoreDNS installed on both and I also have Vault installed (prod only) and consul installed (both clusters)</p>
<p><strong>Desired state</strong></p>
<p>I need to be able to connect from prod cluster to test using internal DNS (service-name.namespace.svc.cluster.(local/test) because of thanos-prometheus and vault (getting secrets on test cluster from prod vault instance)</p>
<p>I also need to connect to both clusters using VPN and be able to resolve http adresses in browser (preferably with wireguard)</p>
<p>i managed to get http adresses accesible using tailscale but cluster-to-cluster communication was still not possible</p>
<p>Does anyone have any idea how to approach this? Thank you in advance.</p>
<hr />

Tomas Krcal
<p>You can consider Rancher  <a href="https://rancher.com/docs/rancher/v2.6/en/" rel="nofollow noreferrer">https://rancher.com/docs/rancher/v2.6/en/</a> as cluster management tool. join the two clusters DO and AWS k8s clusters as downstream clusters in rancher and manage them centrally using rancher</p>
