joshsiv-mulga c74c3aa0a2 feat(admin): wire IPsec peer cert into admin init + join paths ...

Add --ipsec bool flag (default true) on adminInitCmd. Single-node init
and the multi-node leader path both emit an IPsec peer cert after the
existing CA+server-cert generation. The multi-node formation server
propagates the IPSecEnabled flag to joining nodes via NetworkConfig;
admin join honours it and emits its own peer cert during the same
cert-issuance step that already produces the server cert.

spinifex.toml template gains an unconditional [network] block carrying
ipsec_enabled so the value is visible to operators on every install
regardless of whether external networking is configured. The daemon
reads it via cluster config (NetworkConfig.IPSecEnabled).

Bead mulga-siv-125.3.5.

2026-05-24 21:10:11 +10:00

..

dhcptest

refactor(vpcd): delete dhcp_manager + DHCP gateway-LRP path (Slice C)

2026-05-24 21:10:11 +10:00

installer

refactor(vpcd): remove macvlan bridge mode

2026-05-24 21:08:52 +10:00

lb-agent

feat: use FIPS compliant cryptography (#225)

2026-05-14 15:42:53 +10:00

spinifex

feat(admin): wire IPsec peer cert into admin init + join paths

2026-05-24 21:10:11 +10:00