Skip to content

Commit 4303e9b

Browse files
committed
Avoid changes to IPsec machine configs
Having any changes in IPsec machine configs lead machine configs rolled out two times and nodes are rebooted twice, because of this apiserver pod's container are exited excessive amount of times, so this commit removes the changes from IPsec machine configs and moves those changes to be part of mco wait-for-ipsec-connect.service. Signed-off-by: Periyasamy Palanisamy <[email protected]>
1 parent 3340bf2 commit 4303e9b

File tree

2 files changed

+0
-2
lines changed

2 files changed

+0
-2
lines changed

bindata/network/ovn-kubernetes/common/80-ipsec-master-extensions.yaml

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,6 @@ spec:
2222
Type=oneshot
2323
ExecStartPre=rm -f /etc/ipsec.d/cno.conf
2424
ExecStart=systemctl enable --now ipsec.service
25-
ExecStartPost=/bin/bash -c 'if grep -q "openshift.conf" /etc/sysconfig/openvswitch; then systemctl enable --now openvswitch-ipsec.service; fi'
2625
2726
[Install]
2827
WantedBy=multi-user.target

bindata/network/ovn-kubernetes/common/80-ipsec-worker-extensions.yaml

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,6 @@ spec:
2222
Type=oneshot
2323
ExecStartPre=rm -f /etc/ipsec.d/cno.conf
2424
ExecStart=systemctl enable --now ipsec.service
25-
ExecStartPost=/bin/bash -c 'if grep -q "openshift.conf" /etc/sysconfig/openvswitch; then systemctl enable --now openvswitch-ipsec.service; fi'
2625
2726
[Install]
2827
WantedBy=multi-user.target

0 commit comments

Comments
 (0)