Add and enable ipsec service

this include installing libreswan and enabling it's systemd service this is to align with rhcos, see: https://github.com/openshift/os/blob/master/extensions-rhel-9.2.yaml#L14
openshift · Feb 5, 2024 · 5958f03 · 5958f03
1 parent 8ea9a41
commit 5958f03
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/roles/openshift_node/defaults/main.yml b/roles/openshift_node/defaults/main.yml
@@ -40,6 +40,8 @@ openshift_node_support_packages_base:
   - nfs-utils
   - NetworkManager
   - NetworkManager-ovs  # https://bugzilla.redhat.com/show_bug.cgi?id=1884095
+  - NetworkManager-libreswan
+  - libreswan
   - dnsmasq
   - lvm2
   - iscsi-initiator-utils

diff --git a/roles/openshift_node/tasks/install.yml b/roles/openshift_node/tasks/install.yml
@@ -112,6 +112,11 @@
     name: "crio"
     enabled: yes
 
+- name: Enable ipsec service
+  systemd:
+    name: "ipsec"
+    enabled: yes
+
 # persistent storage in journal is needed for MachineConfig to work
 - name: Enable persistent storage on journal
   ini_file: