-
Story
-
Resolution: Done
-
Critical
-
None
-
None
-
None
-
True
-
-
True
-
OCPSTRAT-1312 - Create a RHEL9 build for FIPS-enabled OpenShift installations
-
-
-
OCMUI Core Sprint 255
Starting with OpenShift 4.16, users who want to create a cluster with fips: true must use a separate build of the installer that is dynamically linked for RHEL 9.
I suggest that on the download pages like https://console.redhat.com/openshift/install/metal/user-provisioned this should appear as a separate platform in addition to "MacOS" and "Linux" (maybe something like "RHEL 9 (FIPS)"?).
Links will be available for download at https://mirror.openshift.com/pub/openshift-v4/<platform>/clients/ocp/stable/openshift-install-rhel9-<cpuarch>.tar.gz when 4.16 is released. e.g. https://mirror.openshift.com/pub/openshift-v4/x86_64/clients/ocp/4.16.0-rc.4/openshift-install-rhel9-amd64.tar.gz
Note that at the time of writing, 'latest' still points to a 4.15 release so there is a -rhel8 instead of a -rhel9 binary present. This will change when 4.16 is released.
- is caused by
-
OCPBUGS-15845 FIPS install should fail if installer is not FIPS capable
- Closed
- is depended on by
-
OCMUI-1980 [OCM-UI] Install multi pre release webpage download button shows file not found error
- Closed
- is related to
-
OCMUI-1882 Simplify metal installer decision flow
- To Do
-
OCMUI-1598 Create both rhel8 and rhel9 entries on console.redhat.com (downloads) for oc-mirror plugin
- Closed
-
OCMUI-1881 Use same download options for metal IPI as UPI/Agent
- Closed
- split to
-
OCMUI-1991 Provide FIPS-capable installer download links for multiarch
- To Do
- mentioned on