frr: add optional BGP neighbor password support

Add conditional password configuration for BGP neighbors in FRR templates.
This allows setting passwords on BGP sessions when the password parameter
is provided in the neighbor configuration.

Signed-off-by: Christian Berendt <[email protected]>

Author: berendt

roles/frr/templates/frr_k3s_cilium.conf.j2

@@ -10,6 +10,9 @@ router bgp {{ frr_local_as }}
  bgp router-id {{ frr_loopback_v4 }}
 {% for item in _frr_uplinks %}
  neighbor {{ item.address }} remote-as {{ item.remote_as }}
+{% if "password" in item %}
+ neighbor {{ item.address }} password {{ item.password }}
+{% endif %}
  neighbor {{ item.address }} update-source {{ item.interface }}
  neighbor {{ item.address }} soft-reconfiguration inbound
 {% endfor %}

roles/frr/templates/frr_leaf.conf.j2

@@ -10,6 +10,9 @@ router bgp {{ frr_local_as }}
  bgp router-id {{ frr_loopback_v4 }}
 {% for item in _frr_uplinks %}
  neighbor {{ item.interface }} interface remote-as {{ item.remote_as }}
+{% if "password" in item %}
+ neighbor {{ item.interface }} password {{ item.password }}
+{% endif %}
 {% endfor %}
  !
  address-family ipv4 unicast

roles/frr/templates/frr_loadbalancer.conf.j2

@@ -10,9 +10,15 @@ router bgp {{ frr_local_as }}
  bgp bestpath as-path multipath-relax
 {% for item in frr_neigh_v4 %}
  neighbor {{ item.address }} remote-as {{ item.remote_as }}
+{% if "password" in item %}
+ neighbor {{ item.address }} password {{ item.password }}
+{% endif %}
 {% endfor %}
 {% for item in frr_neigh_v6 %}
  neighbor {{ item.address }} remote-as {{ item.remote_as }}
+{% if "password" in item %}
+ neighbor {{ item.address }} password {{ item.password }}
+{% endif %}
 {% endfor %}
  !
  address-family ipv4 unicast

roles/frr/templates/frr_loadbalancer_external_uplink.conf.j2

@@ -10,6 +10,9 @@ router bgp {{ frr_local_as }}
  bgp router-id {{ frr_loopback_v4 }}
 {% for item in _frr_uplinks + frr_uplinks_external %}
  neighbor {{ item.interface }} interface remote-as {{ item.remote_as }}
+{% if "password" in item %}
+ neighbor {{ item.interface }} password {{ item.password }}
+{% endif %}
 {% endfor %}
  !
  address-family ipv4 unicast