Epic Goal

Make the GitOps Operator Bundle image for RHEL 8, from CPaaS and Konflux CI systems, FIPS compliant

Technical Work

• In the midstream repo, edit the render_templates.in script, to make changes for setting the annotation "features.operators.openshift.io/fips-compliant" to "true" as below

  features.operators.openshift.io/fips-compliant: "true"
  

Acceptance Criteria

Use the new check tool to scan images
https://github.com/openshift/check-payload : Checks CGO_ENABLED=1 , presence of openssl, strictfipsruntime tag, no_openssl tag, dynamic linking
All existing acceptance tests should pass when run against an OCP cluster with FIPS enabled.
All existing acceptance tests should pass when run against an OCP cluster with FIPS enabled.