Skip to content
This repository was archived by the owner on Dec 17, 2025. It is now read-only.

Add openvswitch-ipsec service image#1

Open
OgarOgarovic wants to merge 16 commits intomasterfrom
dev/add-openvswitch-ipsec
Open

Add openvswitch-ipsec service image#1
OgarOgarovic wants to merge 16 commits intomasterfrom
dev/add-openvswitch-ipsec

Conversation

@OgarOgarovic
Copy link
Collaborator

  • openvswitch-ipsec image for IPsec encryption of node to node communication
  • epic
  • sibling kolla-ansible PR
  • accompanying ADR
  • previous version in a private repo here

fdobrovolny and others added 11 commits September 4, 2024 16:29
Change-Id: Idb4b87c0c1de6323cd1fab9b81e00a358bf64553
Also adding libreswan to debian based images
The directory structure defines oneshot and longrun
processes to run for the openvswitch-ipsec service
It was previously the solution for non-functioning original
implementation with supervisord, but now the --checknss
ipsec command is initializing the database in the default
location - /var/lib/ipsec
Added the original kolla_start entrypoint as oneshot
for the certificates copy. The image CMD needs to be
empty because any short lived process here will
keep restarting the whole container.
@OgarOgarovic OgarOgarovic changed the title Dev/add openvswitch ipsec Add openvswitch-ipsec service image Sep 24, 2024
@matofeder matofeder self-requested a review September 24, 2024 08:15
OgarOgarovic and others added 5 commits September 26, 2024 12:47
Since packages are installed using root during image build - we
need to use sudo when updating those packages when using dev-mode.

Change-Id: Idf14e334d50abeb1719563b1733af0b8425b3b55
This reverts commit 3c49991.

Reason for revert: bug fixed upstream opensearch-project/OpenSearch-Dashboards#8097

Change-Id: Icc810554dc877c9dedaf26609d59a93059a38ba7
@OgarOgarovic
Copy link
Collaborator Author

Change proposed upstream - kolla/930804

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants