Skip to content

Commit 5212a25

Browse files
committed
Add openvswitch-ipsec package for ipsec plugin
The FDP story (https://issues.redhat.com/browse/FDP-1051) gets openvswitch-ipsec systemd service with required configurable parameters for OCP. It's available with OVS 3.5 version, So OCP can use this service running on the host for configuring IPsec for east west traffic. This provides more flexibility in managing IPsec connections created by OVN and OVS, helps to bring up existing IPsec connections timely before kubelet service comes up upon node reboot scenarios. Hence this commit includes openvswitch-ipsec package to be part of the ipsec extension. Signed-off-by: Periyasamy Palanisamy <[email protected]>
1 parent 3b7a7be commit 5212a25

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

Diff for: extensions-ocp-rhel-9.6.yaml

+1
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,7 @@ extensions:
2424
# we can revert once that's fixed in latest libreswan
2525
- libreswan-4.6-3.el9_0.3
2626
- NetworkManager-libreswan
27+
- openvswitch3.5-ipsec
2728
# https://github.com/coreos/fedora-coreos-tracker/issues/326
2829
usbguard:
2930
packages:

0 commit comments

Comments
 (0)