Skip to content

Commit c6c2554

Browse files
Merge pull request #267731 from MGoedtel/aks120128
updated enable-fips-nodes.md
2 parents fc87e9e + abc499a commit c6c2554

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

articles/aks/enable-fips-nodes.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Learn how to enable Federal Information Process Standard (FIPS) for
44
author: rayoef
55
ms.author: rayoflores
66
ms.topic: how-to
7-
ms.date: 06/28/2023
7+
ms.date: 02/29/2024
88
ms.custom: template-how-to
99
---
1010

@@ -22,6 +22,8 @@ The Federal Information Processing Standard (FIPS) 140-2 is a US government stan
2222
* FIPS-enabled node pools require Kubernetes version 1.19 and greater.
2323
* To update the underlying packages or modules used for FIPS, you must use [Node Image Upgrade][node-image-upgrade].
2424
* Container images on the FIPS nodes haven't been assessed for FIPS compliance.
25+
* Mounting of a CIFS share fails because FIPS disables some authentication modules. To work around this issue, see [Errors when mounting a file share on a FIPS-enabled node pool][errors-mount-file-share-fips].
26+
2527

2628
> [!IMPORTANT]
2729
> The FIPS-enabled Linux image is a different image than the default Linux image used for Linux-based node pools. To enable FIPS on a node pool, you must create a new Linux-based node pool. You can't enable FIPS on existing node pools.
@@ -137,3 +139,4 @@ To learn more about AKS security, see [Best practices for cluster security and u
137139
[fips]: /azure/compliance/offerings/offering-fips-140-2
138140
[install-azure-cli]: /cli/azure/install-azure-cli
139141
[node-image-upgrade]: node-image-upgrade.md
142+
[errors-mount-file-share-fips]: /troubleshoot/azure/azure-kubernetes/fail-to-mount-azure-file-share#fipsnodepool

0 commit comments

Comments
 (0)