Uploaded image for project: 'Red Hat OpenShift AI Engineering'
  1. Red Hat OpenShift AI Engineering
  2. RHOAIENG-4350

In workbench the oc CLI tool cannot be used on FIPS enabled cluster

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Critical Critical
    • None
    • RHOAI_2.8.0
    • IDE
    • False
    • Hide

      None

      Show
      None
    • False
    • No
    • No
    • Testable

      With RHOAI 2.8RC1 - when trying to run `oc` CLI command on Standard Data Science ( workbench, I can see following error be printed out:

      (app-root) (app-root) oc version
      FIPS mode is enabled, but the required OpenSSL backend is unavailable
      

      The very same happens even if I try to download `oc` command via the menu that provides my OpenShift cluster instance (thus having decently new oc command). The version of OpenSSL used on the image:

      (app-root) (app-root) openssl version
      OpenSSL 3.0.7 1 Nov 2022 (Library: OpenSSL 3.0.7 1 Nov 2022)
      

      Checked with both versions of SDS:

      s2i-generic-data-science-notebook:2023.2
      s2i-generic-data-science-notebook:2023.1
      

      Haven't tested it, but I think that the same issue applies also for a few previous RHOAI versions at least.

      Also this may apply to other workbench images (Minimal, Pytorch, etc.).


      We should be able to run our tooling also in FIPS mode so we can say we're FIPS tolerant.

            Unassigned Unassigned
            jstourac@redhat.com Jan Stourac
            RHOAI IDE
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated: