## Reserver IP address
```sh
gcloud compute addresses create staging-vpn --region REGION
```

## Retrive IP address
```sh
gcloud compute addresses describe staging-vpn --region REGION | grep address:
```

## Apply IP
Put the IP in `loadBalancerIP`.

## Add user
```sh
kubectl exec  staging-vpn-0 --namespace staging -it -- "easyrsa build-client-full USERNAME nopass
```

## Retrive user config
```sh
kubectl exec  staging-vpn-0 --namespace staging -it -- ovpn_getclient USERNAME > USERNAME.ovpn
```
## DNS Server (Automatically)
The server will pickup the DNS server automatically in the initialization stage.
If the cluster when down/ DNS server get changed, you must update it manually.
## DNS Server (manually)
Get the IP address of the DNS server
```sh
kubectl exec staging-vpn-0  --namespace staging -c staging-vpn -it -- cat /etc/resolv.conf  | grep nameserver
```
## Trubleshot (Mac OS)
If the DNS search domain did not work, you need to restart the DNS resolver
using
```sh
$ sudo killall -HUP mDNSResponder
```