openshift/openshift-docs
1
0
Fork 0
mirror of https://github.com/openshift/openshift-docs.git synced 2026-02-05 12:46:18 +01:00
Code Issues Releases Activity

OCPBUGS-46042: Swapped out Shared Gateway Mode for routingViaHost

Browse Source
This commit is contained in:
dfitzmau
2025-09-09 14:06:15 +01:00
committed by openshift-cherrypick-robot
parent 709605b63c
commit b4d39f4399
11 changed files with 51 additions and 54 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
networking/network_security/configuring-ipsec-ovn.adoc
View File

@@ -42,10 +42,10 @@ include::modules/nw-own-ipsec-modes.adoc[leveloffset=+1]
[id="{context}-prerequisites"]
== Prerequisites
For IPsec support for encrypting traffic to external hosts, ensure that the following prerequisites are met:
For IPsec support for encrypting traffic to external hosts, ensure that you meet the following prerequisites:
* The OVN-Kubernetes network plugin must be configured in local gateway mode, where `ovnKubernetesConfig.gatewayConfig.routingViaHost=true`.
* The NMState Operator is installed. This Operator is required for specifying the IPsec configuration. For more information, see xref:../../networking/networking_operators/k8s-nmstate-about-the-k8s-nmstate-operator.adoc#k8s-nmstate-about-the-k8s-nmstate-operator[Kubernetes NMState Operator].
* Set `routingViaHost=true` in the `ovnKubernetesConfig.gatewayConfig` specification of the OVN-Kubernetes network plugin.
* Install the NMState Operator. This Operator is required for specifying the IPsec configuration. For more information, see xref:../../networking/networking_operators/k8s-nmstate-about-the-k8s-nmstate-operator.adoc#k8s-nmstate-about-the-k8s-nmstate-operator[Kubernetes NMState Operator].
+
--
[NOTE]