From c28d8eb1d4be1ef7d43798a15c93aa15499273ab Mon Sep 17 00:00:00 2001 From: Lukas Spinler Date: Tue, 3 Feb 2026 10:54:59 +0100 Subject: [PATCH] feat(operator): added ceIPSecPSKSecret support Signed-off-by: Lukas Spinler --- submariner-operator/README.md | 1 + submariner-operator/templates/submariner.yaml | 4 ++++ submariner-operator/values.yaml | 1 + 3 files changed, 6 insertions(+) diff --git a/submariner-operator/README.md b/submariner-operator/README.md index 6f6d2ae..692498f 100644 --- a/submariner-operator/README.md +++ b/submariner-operator/README.md @@ -28,6 +28,7 @@ Submariner enables direct networking between Pods and Services in different Kube | ipsec.forceUDPEncaps | bool | `false` | | | ipsec.ikePort | int | `500` | | | ipsec.natPort | int | `4500` | | +| ipsec.pskSecret | string | `""` | Name of the Kubernetes Secret containing the IPsec PSK as field psk | | ipsec.psk | string | `""` | | | leadership.leaseDuration | int | `10` | | | leadership.renewDeadline | int | `5` | | diff --git a/submariner-operator/templates/submariner.yaml b/submariner-operator/templates/submariner.yaml index 09c58a7..77daa16 100644 --- a/submariner-operator/templates/submariner.yaml +++ b/submariner-operator/templates/submariner.yaml @@ -18,7 +18,11 @@ spec: ceIPSecForceUDPEncaps: {{ .Values.ipsec.forceUDPEncaps }} ceIPSecIKEPort: {{ .Values.ipsec.ikePort }} ceIPSecNATTPort: {{ .Values.ipsec.natPort }} + {{- if .Values.ipsec.pskSecret }} + ceIPSecPSKSecret: {{ .Values.ipsec.pskSecret }} + {{- else }} ceIPSecPSK: {{ .Values.ipsec.psk }} + {{- end }} clusterCIDR: "{{ .Values.submariner.clusterCidr }}" clusterID: {{ .Values.submariner.clusterId }} colorCodes: {{ .Values.submariner.colorCodes }} diff --git a/submariner-operator/values.yaml b/submariner-operator/values.yaml index c8544f2..36af7e9 100644 --- a/submariner-operator/values.yaml +++ b/submariner-operator/values.yaml @@ -29,6 +29,7 @@ broker: images: {} ipsec: psk: "" + pskSecret: "" debug: false forceUDPEncaps: false ikePort: 500