Skip to content

Commit e1296e5

Browse files
Merge pull request #273731 from allyford/fips-os-options
fips-os-options
2 parents 9da5d51 + da62b71 commit e1296e5

File tree

1 file changed

+17
-0
lines changed

1 file changed

+17
-0
lines changed

articles/aks/enable-fips-nodes.md

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,23 @@ The Federal Information Processing Standard (FIPS) 140-2 is a US government stan
3333
>
3434
> FIPS-enabled node images may have different version numbers, such as kernel version, than images that aren't FIPS-enabled. The update cycle for FIPS-enabled node pools and node images may differ from node pools and images that aren't FIPS-enabled.
3535
36+
## Supported OS Versions
37+
You can create FIPS-enabled node pools on all supported OS types, Linux and Windows. However, not all OS versions support FIPS-enabled nodepools. After a new OS version is released, there is typically a waiting period before it is FIPS compliant.
38+
39+
The below table includes the supported OS versions:
40+
41+
|OS Type|OS SKU|FIPS Compliance|
42+
|--|--|--|
43+
|Linux|Ubuntu|Supported|
44+
|Linux|Azure Linux| Supported|
45+
|Windows|Windows Server 2019| Supported|
46+
|Windows| Windows Server 2022| Supported|
47+
48+
When requesting FIPS enabled Ubuntu, if the default Ubuntu version does not support FIPS, AKS will default to the most recent FIPS-supported version of Ubuntu. For example, Ubuntu 22.04 is default for Linux node pools. Since 22.04 does not currently support FIPS, AKS will default to Ubuntu 20.04 for Linux FIPS-enabled nodepools.
49+
50+
> [!NOTE]
51+
> Previously, you could use the GetOSOptions API to determine whether a given OS supported FIPS. The GetOSOptions API is now deprecated and it will no longer be included in new AKS API versions starting with 2024-05-01.
52+
3653
## Create a FIPS-enabled Linux node pool
3754

3855
1. Create a FIPS-enabled Linux node pool using the [`az aks nodepool add`][az-aks-nodepool-add] command with the `--enable-fips-image` parameter.

0 commit comments

Comments
 (0)