Skip to content

Commit 19c2998

Browse files
committed
Mandatory 20s wait after checking IKE SAs
It is for troubleshooting purpose Signed-off-by: Periyasamy Palanisamy <[email protected]>
1 parent fcfc17c commit 19c2998

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

templates/common/_base/files/wait-for-ipsec-connect.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,9 @@ contents:
2828
establishedsa=$(ipsec showstates | grep STATE_V2_ESTABLISHED_CHILD_SA | grep -o '"[^"]*"' | sed 's/"//g' | tr ' ' '\n' | sort | uniq | tr '\n' ' ')
2929
if [ "$desiredconn" == "$establishedsa" ]; then
3030
echo "IPsec SAs are established for desired connections"
31+
# Noticed control plane nodes are still reestablishing child SAs (reason not found yet) again after around 15s, so just for test
32+
# introducing sleep before break from loop.
33+
sleep 20s
3134
break
3235
else
3336
echo "IPsec SAs are not established yet, waiting"

0 commit comments

Comments
 (0)