From baa05baa3d0756b094ad5b73bc06a6f98f98f8a8 Mon Sep 17 00:00:00 2001 From: Anurag Saxena Date: Wed, 15 Jul 2026 11:48:48 -0400 Subject: [PATCH] OCPBUGS-74205,CORENET-6311: Skip _stackmanager for libreswan 5.3+ Backport of #2885 from release-4.19. The _stackmanager binary was removed in libreswan 5.3, causing IPsec pod startup failures. Wrap the call in a conditional check so it only runs when the binary exists. --- .../network/ovn-kubernetes/common/ipsec-containerized.yaml | 4 +++- bindata/network/ovn-kubernetes/common/ipsec-host.yaml | 4 +++- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/bindata/network/ovn-kubernetes/common/ipsec-containerized.yaml b/bindata/network/ovn-kubernetes/common/ipsec-containerized.yaml index fd730f64b6..7f7fa077fb 100644 --- a/bindata/network/ovn-kubernetes/common/ipsec-containerized.yaml +++ b/bindata/network/ovn-kubernetes/common/ipsec-containerized.yaml @@ -270,7 +270,9 @@ spec: /usr/libexec/ipsec/addconn --config /etc/ipsec.conf --checkconfig # Check kernel modules - /usr/libexec/ipsec/_stackmanager start + if [ -e /usr/libexec/ipsec/_stackmanager ]; then + /usr/libexec/ipsec/_stackmanager start + fi # Check nss database status /usr/sbin/ipsec --checknss # Start the pluto IKE daemon diff --git a/bindata/network/ovn-kubernetes/common/ipsec-host.yaml b/bindata/network/ovn-kubernetes/common/ipsec-host.yaml index e274f9ceb7..2bc906d8db 100644 --- a/bindata/network/ovn-kubernetes/common/ipsec-host.yaml +++ b/bindata/network/ovn-kubernetes/common/ipsec-host.yaml @@ -281,7 +281,9 @@ spec: /usr/libexec/ipsec/addconn --config /etc/ipsec.conf --checkconfig # Check kernel modules - /usr/libexec/ipsec/_stackmanager start + if [ -e /usr/libexec/ipsec/_stackmanager ]; then + /usr/libexec/ipsec/_stackmanager start + fi # Check nss database status /usr/sbin/ipsec --checknss