Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-52947

Cannot enable FIPS on ZCX for OCP Cluster

XMLWordPrintable

    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None
    • None
    • Metal Platform 268
    • 1
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Description of problem:

          ZCX for OCP

      Version-Release number of selected component (if applicable):

          4.18

      How reproducible:

       always

      Steps to Reproduce:

          1. Download the installation program from https://mirror.openshift.com/pub/openshift-v4/s390x/clients/ocp/4.18.1/openshift-install-rhel9-s390x.tar.gz
          2. Extract the installation program
          3. Try to generate ignition files: openshift-install-fips create manifests --dir=${OCPCWD}     

      Actual results:

          ERROR failed to fetch Kubeconfig Admin Client: failed to load asset "Install Config": failed to create install config: invalid "install-config.yaml" file: fips: Forbidden: target cluster is in FIPS mode, failed to read client FIPS state /proc/sys/crypto/fips_enabled: open /proc/sys/crypto/fips_enabled: no such file or directory 

      Expected results:

          

      Additional info:

          

              rpittau@redhat.com Riccardo Pittau
              konstantin.stamatov@ibm.com Konstantin Stamatov
              Konstantin Stamatov
              None
              None
              None
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: