Skip to content

Commit 7dda6cd

Browse files
committed
fips-os-options
1 parent 694d65b commit 7dda6cd

File tree

1 file changed

+16
-0
lines changed

1 file changed

+16
-0
lines changed

articles/aks/enable-fips-nodes.md

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,22 @@ The Federal Information Processing Standard (FIPS) 140-2 is a US government stan
3333
>
3434
> FIPS-enabled node images may have different version numbers, such as kernel version, than images that aren't FIPS-enabled. The update cycle for FIPS-enabled node pools and node images may differ from node pools and images that aren't FIPS-enabled.
3535
36+
## Supported OS Versions
37+
You can create FIPS-enabled node pools on all supported OS types, Linux and Windows. However, not all OS versions support FIPS-enabled nodepools. After a new OS version is released, there is typically a period until it is FIPS compliant.
38+
39+
The below table includes the supported OS versions:
40+
|OS Type|OS SKU|FIPS Compliance|
41+
|--|--|--|
42+
|Linux|Ubuntu|Supported|
43+
|Linux|Azure Linux| Supported|
44+
|Windows|Windows Server 2019| Supported|
45+
|Windows| Windows Server 2022| Supported|
46+
47+
If the default version of Ubuntu does not support FIPS, AKS will default to the most recent FIPS-supported version of Ubuntu. For example, Ubuntu 22.04 is default for Linux node pools. Since 22.04 does not currently support FIPS, AKS will default to Ubuntu 20.04 for Linux FIPS-enabled nodepools.
48+
49+
> [!NOTE]
50+
> GetOSOptions API is deprecated and it will no longer be included in new AKS API versions starting with 2024-04-01.
51+
3652
## Create a FIPS-enabled Linux node pool
3753

3854
1. Create a FIPS-enabled Linux node pool using the [`az aks nodepool add`][az-aks-nodepool-add] command with the `--enable-fips-image` parameter.

0 commit comments

Comments
 (0)