Skip to content

feat: Implement MacSec Controller#366

Draft
sven-rosenzweig wants to merge 2 commits into
mainfrom
feat/macsec
Draft

feat: Implement MacSec Controller#366
sven-rosenzweig wants to merge 2 commits into
mainfrom
feat/macsec

Conversation

@sven-rosenzweig
Copy link
Copy Markdown
Contributor

No description provided.

Add API and reconciliation scaffolding for Layer 2 MACsec encryption.

The MacSec resource is modeled as a tuple of:
- Device
- Interface
- Secret(s)

Multiple secrets are supported to allow key rotation and rollover.

Follow-up commits will implement provider-specific reconciliation
logic for Cisco IOS-XR and NX-OS devices.

So far the interface does implement the MacSec keychain and policy.
This links will be implemented in a different commit.

Signed-off-by: Sven Rosenzweig <sven.rosenzweig@sap.com>
Push keychain, macsec policy config to Cisco IOS XR devices.

Signed-off-by: Sven Rosenzweig <sven.rosenzweig@sap.com>
@hardikdr hardikdr added the area/switch-automation Automation processes for network switch management and operations. label May 22, 2026
@hardikdr hardikdr added this to Roadmap May 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/switch-automation Automation processes for network switch management and operations. size/XXL

Projects

Status: No status

Development

Successfully merging this pull request may close these issues.

2 participants