Force restart of ipsec in legacy setup

Force a restart of the ipsec daemon(s) after the configuration is
persisted. This should be safe as the tunnels run in kernel-space; and
should effectively reload all the configurations.

Change-Id: I914ba8e18cd071a1dce7ebca4afb21a341cf2406
Closes-Bug: #1749703
This commit is contained in:
Juan Antonio Osorio Robles 2018-02-15 15:20:41 +02:00
parent 7815cc5108
commit db0225d7b0
1 changed files with 5 additions and 0 deletions

View File

@ -48,6 +48,11 @@
- include_tasks: legacy-ipsec-conf.yml
with_items: "{{ networks }}"
# We force the restart of IPSEC here since adding it as a handler was
# getting run between the loop above, which is not desirable.
- name: Force restart IPSEC
shell: ipsec restart
# Permissions gotten from http://www.linux-ha.org/doc/dev-guides/_installing_and_packaging_resource_agents.html
- name: Install TripleO IPSEC resource agent
copy: