Skip to content

feat: Implement MacSec Controller - #366

Draft
sven-rosenzweig wants to merge 2 commits into
mainfrom
feat/macsec
Draft

sven-rosenzweig wants to merge 2 commits into
mainfrom
feat/macsec

Conversation

@sven-rosenzweig

Copy link
Copy Markdown
Contributor

No description provided.

Add API and reconciliation scaffolding for Layer 2 MACsec encryption.

The MacSec resource is modeled as a tuple of:
- Device
- Interface
- Secret(s)

Multiple secrets are supported to allow key rotation and rollover.

Follow-up commits will implement provider-specific reconciliation
logic for Cisco IOS-XR and NX-OS devices.

So far the interface does implement the MacSec keychain and policy.
This links will be implemented in a different commit.

Signed-off-by: Sven Rosenzweig <sven.rosenzweig@sap.com>
Push keychain, macsec policy config to Cisco IOS XR devices.

Signed-off-by: Sven Rosenzweig <sven.rosenzweig@sap.com>
@hardikdr hardikdr added the area/switch-automation Automation processes for network switch management and operations. label May 22, 2026
@hardikdr hardikdr added this to Roadmap May 22, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/switch-automation Automation processes for network switch management and operations. size/XXL

Projects

Status: No status

Development

Successfully merging this pull request may close these issues.

2 participants