Add Buildkite group for FIPS integration tests

Author: ycombinator

.buildkite/bk.integration.pipeline.yml

@@ -311,6 +311,116 @@ steps:
           machineType: "n1-standard-8"
           image: "${IMAGE_RHEL_8}"
 
+
+  - group: "FRH:FIPS"
+    key: integration-tests-fips
+    depends_on:
+      - integration_ess # TODO: replace with integration_frh when such an environment is available
+    steps:
+      - label: "x86_64:non-sudo: {{matrix}}"
+        depends_on: packaging-ubuntu-x86-64
+        command: |
+          buildkite-agent artifact download build/distributions/** . --step 'packaging-ubuntu-x86-64-fips'
+          .buildkite/scripts/steps/integration_tests_tf.sh {{matrix}} false true
+        artifact_paths:
+          - build/**
+          - build/diagnostics/**
+        retry:
+          automatic:
+            limit: 1
+        agents:
+          provider: "gcp"
+          machineType: "n1-standard-8"
+          image: "${IMAGE_UBUNTU_2404_X86_64}" # TODO: replace with FIPS-configured image
+        matrix:
+          - default
+
+      - label: "x86_64:sudo: {{matrix}}"
+        depends_on:
+          - packaging-ubuntu-x86-64
+        # due to deb group present in matrix tar.gz and deb packages artifacts are required
+        command: |
+          buildkite-agent artifact download build/distributions/** . --step 'packaging-ubuntu-x86-64-fips'
+          .buildkite/scripts/steps/integration_tests_tf.sh {{matrix}} true true
+        artifact_paths:
+          - build/**
+          - build/diagnostics/**
+        retry:
+          automatic:
+            limit: 1
+        agents:
+          provider: "gcp"
+          machineType: "n1-standard-8"
+          image: "${IMAGE_UBUNTU_2404_X86_64}" # TODO: replace with FIPS-configured image
+        matrix:
+          - default
+          - upgrade
+          - upgrade-flavor
+          - standalone-upgrade
+          - fleet
+          - fleet-endpoint-security
+          - fleet-airgapped
+          - fleet-airgapped-privileged
+          - fleet-privileged
+          - fleet-upgrade-to-pr-build
+          - install-uninstall
+          - fqdn
+          - deb
+          - container
+
+      - label: "arm:sudo: {{matrix}}"
+        depends_on:
+          - packaging-ubuntu-arm64
+        command: |
+          buildkite-agent artifact download build/distributions/** . --step 'packaging-ubuntu-arm64-fips'
+          .buildkite/scripts/steps/integration_tests_tf.sh {{matrix}} true true
+        artifact_paths:
+          - build/**
+          - build/diagnostics/**
+        agents:
+          provider: "aws"
+          image: "${IMAGE_UBUNTU_2404_ARM_64}" # TODO: replace with FIPS-configured image
+          instanceType: "m6g.2xlarge"
+        retry:
+          automatic:
+            limit: 1
+        matrix:
+          - default
+          - upgrade
+          - upgrade-flavor
+          - standalone-upgrade
+          - fleet
+          # ARM tests are enabled for only selected groups in order to save resources
+          # - fleet-endpoint-security
+          # - fleet-airgapped
+          # - fleet-airgapped-privileged
+          # - fleet-privileged
+          # - fleet-upgrade-to-pr-build
+          # - install-uninstall
+          # - fqdn
+          # - deb
+          # - container
+
+      - label: "arm:non-sudo: {{matrix}}"
+        skip: true
+        depends_on:
+          - packaging-ubuntu-arm64
+        command: |
+          buildkite-agent artifact download build/distributions/** . --step 'packaging-ubuntu-arm64-fips'
+          .buildkite/scripts/steps/integration_tests_tf.sh {{matrix}} false true
+        artifact_paths:
+          - build/**
+          - build/diagnostics/**
+        retry:
+          automatic:
+            limit: 1
+        agents:
+          provider: "aws"
+          image: "${IMAGE_UBUNTU_2404_ARM_64}" # TODO: replace with FIPS-configured image
+          instanceType: "m6g.xlarge"
+        matrix:
+          - default
+
   - group: "Kubernetes"
     key: integration-tests-kubernetes
     depends_on: