Has anyone had success using WireGuard to VPN into their cluster and have local access to pods via K8s DNS?
1. I had to deploy CoreDNS to our cluster and set up DNS query rewriting to redirect queries from *.cluster.mystartup to *.svc.cluster.local because docker on OS X has issues resolving hostnames that end in .local
2. I had to modify the code to support a non-standard MTU to deal with a networking issue related to google cloud.
It works like a dream and was dirt simple to set up, but would probably require some additional work once you go beyond one cluster (which I think is true for cross-cluster service discovery regardless in Kubernetes).