Skip to content

Commit 0644061

Browse files
authored
Merge pull request #56757 from EricPonvelle/OSDOCS-3338_Fips-Installation
OSDOCS-3338: Added FIPS installation option to ROSA
2 parents a23ed69 + ac96be9 commit 0644061

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

modules/rosa-sts-interactive-cluster-creation-mode-options.adoc

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -73,6 +73,13 @@ The following table describes the interactive cluster creation mode options:
7373
|`Host prefix`
7474
|Specify the subnet prefix length assigned to pods scheduled to individual machines. The host prefix determines the pod IP address pool for each machine. For example, if the host prefix is set to `/23`, each machine is assigned a `/23` subnet from the pod CIDR address range. The default is `/23`, allowing 512 cluster nodes and 512 pods per node, both of which are beyond our supported maximums. For information on the supported maximums, see the Additional resources section below.
7575

76+
|`fips (optional)`
77+
|Enable or disable FIPS mode. The default is `false` (disabled). If FIPS mode is enabled, the {op-system-first} machines that {product-title} runs on bypass the default Kubernetes cryptography suite and use the cryptography modules that are provided with RHCOS instead.
78+
[IMPORTANT]
79+
====
80+
The use of FIPS Validated / Modules in Process cryptographic libraries is only supported on {product-title} deployments on the `x86_64` architecture.
81+
====
82+
7683
|`Encrypt etcd data (optional)`
7784
|In {product-title}, the control plane storage is encrypted at rest by default and this includes encryption of the etcd volumes. You can additionally enable the `Encrypt etcd data` option to encrypt the key values for some resources in etcd, but not the keys.
7885

0 commit comments

Comments
 (0)