create a healthcheck

[pieterlange]

Preferably accessible over HTTP but otherwise execable

[pieterlange]

this has not been updated because the entrypoint exec's the openvpn binary and it rarely if ever crashes.

I would consider a readiness check but i'm looking for input from users.

[mtsgrd]

I made a sidecar with a few lines of Go, not because it helps verify the VPN server is responding, but because the AWS LB health checks otherwise continuously generated a lot of noise in the VPN server logs.

[pieterlange]

Sharing is caring :). I'm sure it's pretty simple but i might incorporate it (i do too hate the flooded logs from ELB healthchecks)

[mtsgrd]

I'll send you a PR over the weekend! Also, just fyi, maybe you're interested in this commit as well? Say you have an RDS database attached to your k8s VPC that isn't publicly accessible, you won't be able to connect to it over VPN unless you also route to the VPC cidr.

[pieterlange]

Ah, i was actually in the process of removing specific envs for routes (as you can stick them into $OVPN_ROUTES) so i won't need that one :). Thanks anyway!

[mtsgrd]

Ah, ofc, that makes a lot of sense!