Merge pull request #12477 from yuvalk/master

Add rpms needed for ipsec
openshift · Feb 7, 2024 · c369981 · c369981
2 parents d96c87d + 16da3de
commit c369981
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/roles/openshift_node/defaults/main.yml b/roles/openshift_node/defaults/main.yml
@@ -40,6 +40,8 @@ openshift_node_support_packages_base:
   - nfs-utils
   - NetworkManager
   - NetworkManager-ovs  # https://bugzilla.redhat.com/show_bug.cgi?id=1884095
+  - NetworkManager-libreswan
+  - libreswan
   - dnsmasq
   - lvm2
   - iscsi-initiator-utils

diff --git a/roles/openshift_node/tasks/install.yml b/roles/openshift_node/tasks/install.yml
@@ -112,6 +112,11 @@
     name: "crio"
     enabled: yes
 
+- name: Enable ipsec service
+  systemd:
+    name: "ipsec"
+    enabled: yes
+
 # persistent storage in journal is needed for MachineConfig to work
 - name: Enable persistent storage on journal
   ini_file: