-
Task
-
Resolution: Done
-
Undefined
-
None
-
None
-
None
Changes in golang build commands and probably Dockerfile(s) to ensure FIPS compliant builds could be generated, refer to FIPS workshop slide deck, https://docs.google.com/presentation/d/1o3IowxHX6BsnxGkIInaQ0lBgnn_K5Ex8jxwCYCeNsqs/edit#slide=id.g2679cb578c3_0_17
Primary changes include:
- CGO_ENABLED=1
- openssl, strictfipsruntime tag, no_openssl tag, dynamic linking
- enable "FIPS_ENABLED=true" env var in CI e2e(s) (refer eg. https://github.com/openshift/release/blob/901a218cb1d1b94ac9d47055c92793ca0c8448fe/ci-operator/config/openshift/kubernetes/openshift-kubernetes-master.yaml#L445-L456 )
- links to
-
RHEA-2024:128547 cert-manager Operator for Red Hat OpenShift 1.14.0
- mentioned on