Add support for cilium ipsec (#7342)

* Add support for cilium ipsec * Fix typo for bpffs
2026-03-10 20:29:18 +03:00 · 2021-03-23 21:46:06 +01:00
parent 4f89bfac48
commit d53fd29e34
7 changed files with 88 additions and 45 deletions
--- a/roles/network_plugin/cilium/templates/cilium-config.yml.j2
+++ b/roles/network_plugin/cilium/templates/cilium-config.yml.j2
@@ -155,3 +155,10 @@ data:
  hubble-metrics-server: ":9091"
 {% endif %}
 {% endif %}
+
+  # IPsec based transparent encryption between nodes
+{% if cilium_ipsec_enabled %}
+  enable-ipsec: "true"
+  ipsec-key-file: /etc/ipsec/keys
+  encrypt-node: "false"
+{% endif %}