vpn: add option to disable

apps/system/vpn/daemonset.yaml

@@ -14,6 +14,13 @@ spec:
         name: vpn-client
     spec:
       hostNetwork: true
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+            - matchExpressions:
+              - key: vpn
+                operator: Exists
       volumes:
         - name: vpn-conf
           configMap:

apps/system/vpn/readme.md

@@ -20,3 +20,15 @@ $ kubectl --context=gullfaxi --namespace vpn \
     create secret generic vpn-creds \
     --from-file=creds=./creds
 ```
+
+To disable:
+
+```bash
+kubectl --context=gullfaxi label nodes gullfaxi vpn-
+```
+
+To enable:
+
+```bash
+kubectl --context=gullfaxi label nodes gullfaxi vpn=""
+```