Skip to content

Commit 581c3db

Browse files
allyfordtamram
andauthored
Update articles/aks/enable-fips-nodes.md
Co-authored-by: Tamra Myers <[email protected]>
1 parent eb4eb0f commit 581c3db

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

articles/aks/enable-fips-nodes.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -147,7 +147,7 @@ FIPS-enabled node pools also have a *kubernetes.azure.com/fips_enabled=true* lab
147147
FIPS-enabled node pools also have a *kubernetes.azure.com/fips_enabled=true* label, which deployments can use to target those node pools.
148148
149149
## Update an existing Linux node pool to enable or disable FIPS (preview)
150-
Existing node pools can be updated to enable or disable FIPS. If you are planning to migrate your node pools from non-fips to fips, you should validate if your application is working properly in a test environment first before migrating a production environment. This should prevent issues caused by the fips kernel blocking some weak cipher/encrypt, e.g. md4/md4 that is not FIPS compliant.
150+
Existing node pools can be updated to enable or disable FIPS. If you are planning to migrate your node pools from non-FIPS to FIPS, first validate that your application is working properly in a test environment before migrating it to a production environment. Validating your application in a test environment should prevent issues caused by the FIPS kernel blocking some weak cipher or encryption algorithm, such as an MD4 algorithm that is not FIPS compliant.
151151
### Limitations
152152
* FIPS cannot be enabled via node pool update for for Windows node pools
153153
* You need the Azure CLI version 5.0.0b3 or later installed and configured to use the `--enable-fips-image` and `--disable-fips-image` fields with the `az aks nodepool update` command. Run `az --version` to find the version. If you need to install or upgrade, see [Install Azure CLI][install-azure-cli].

0 commit comments

Comments
 (0)