Story (Required)

As a developer/customer I want run Openshift builds with FIPS-enabled OpenShift

Background (Required)

Enable compliant deployment of Builds on a FIPS-enabled OpenShift

Approach

Manual testing:

1. Obtain a candidate bundle from Konflux
2. Use cluster-bot to launch an OpenShift cluster in FIPS mode. Do not use a hosted control plane cluster (ex: default ROSA).
3. Configure ImageContentSource to set up the Konflux mirrors for the operator bundle.
4. Deploy operator bundle in a candidate catalog
5. Run smoke test of build strategies
   1. Buildah
   2. s2i

Out of Scope

Automated approach for FIPS testing - this can be revisited if it is supported by Konflux.

Done Checklist

With FIPS-enabled OpenShift:

• Install Openshift builds
• Run Buildah and S2I
• Uninstall Openshift builds