Proposed title of this feature request: Namespace-to-namespace IPsec OCP 4.
It is mentioned that it is expected to have IPSec new features in the future like project scoped so it is great to have a tracker.
"What's new in OpenShift 4.7" video at 18:20 indicates that IPsec per namespace may come in a future release: https://www.youtube.com/watch?v=74q5nO-VCRc
2. What is the nature and description of the request?
To have the ability to configure IPsec in NS, so it is possible to tune the project scope and not only node-to-node configuration.
3. Why does the customer need this? (List the business requirements here)
To improve the security tuning in namespaces as sometimes, the full node scope is not accurate for all the workloads. This will improve the security to the maximum detail of encryption.
4. List any affected packages or components.
- libreswan,ovn,ipsec.