feat(operator): added ceIPSecPSKSecret support

Signed-off-by: Lukas Spinler <lukas.spinler@gl-systemhaus.de>
This commit is contained in:
Lukas Spinler
2026-02-04 08:25:07 -05:00
committed by Thomas Pantelis
parent d52050592d
commit c28d8eb1d4
3 changed files with 6 additions and 0 deletions
+1
View File
@@ -28,6 +28,7 @@ Submariner enables direct networking between Pods and Services in different Kube
| ipsec.forceUDPEncaps | bool | `false` | | | ipsec.forceUDPEncaps | bool | `false` | |
| ipsec.ikePort | int | `500` | | | ipsec.ikePort | int | `500` | |
| ipsec.natPort | int | `4500` | | | ipsec.natPort | int | `4500` | |
| ipsec.pskSecret | string | `""` | Name of the Kubernetes Secret containing the IPsec PSK as field psk |
| ipsec.psk | string | `""` | | | ipsec.psk | string | `""` | |
| leadership.leaseDuration | int | `10` | | | leadership.leaseDuration | int | `10` | |
| leadership.renewDeadline | int | `5` | | | leadership.renewDeadline | int | `5` | |
@@ -18,7 +18,11 @@ spec:
ceIPSecForceUDPEncaps: {{ .Values.ipsec.forceUDPEncaps }} ceIPSecForceUDPEncaps: {{ .Values.ipsec.forceUDPEncaps }}
ceIPSecIKEPort: {{ .Values.ipsec.ikePort }} ceIPSecIKEPort: {{ .Values.ipsec.ikePort }}
ceIPSecNATTPort: {{ .Values.ipsec.natPort }} ceIPSecNATTPort: {{ .Values.ipsec.natPort }}
{{- if .Values.ipsec.pskSecret }}
ceIPSecPSKSecret: {{ .Values.ipsec.pskSecret }}
{{- else }}
ceIPSecPSK: {{ .Values.ipsec.psk }} ceIPSecPSK: {{ .Values.ipsec.psk }}
{{- end }}
clusterCIDR: "{{ .Values.submariner.clusterCidr }}" clusterCIDR: "{{ .Values.submariner.clusterCidr }}"
clusterID: {{ .Values.submariner.clusterId }} clusterID: {{ .Values.submariner.clusterId }}
colorCodes: {{ .Values.submariner.colorCodes }} colorCodes: {{ .Values.submariner.colorCodes }}
+1
View File
@@ -29,6 +29,7 @@ broker:
images: {} images: {}
ipsec: ipsec:
psk: "" psk: ""
pskSecret: ""
debug: false debug: false
forceUDPEncaps: false forceUDPEncaps: false
ikePort: 500 ikePort: 500