Skip to content

Commit 4b76479

Browse files
Merge pull request #35937 from MirzWeiss/TELCODOCS-294
TELCODOCS-294: Created new module for FIPS validation and moved additional resources into RHCOS module
2 parents 5e00d9d + 6ca7251 commit 4b76479

File tree

3 files changed

+12
-5
lines changed

3 files changed

+12
-5
lines changed

modules/sandboxed-containers-rhcos-extensions.adoc

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,3 +7,7 @@
77
= {op-system} extensions
88

99
The {sandboxed-containers-operator} is based on the {op-system-first} extensions concept. The sandboxed containers {op-system} extension contains RPMs for Kata, QEMU, and its dependencies. You can enable them by using the `MachineConfig` resources that the Machine Config Operator provides.
10+
11+
.Additional resources
12+
13+
* xref:../post_installation_configuration/machine-configuration-tasks.adoc#rhcos-add-extensions_post-install-machine-configuration-tasks[Adding extensions to RHCOS]

modules/security-compliance-nist.adoc

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,17 @@
11
// Module included in the following assemblies:
22
//
33
// * security/container_security/security-compliance.adoc
4+
// * understanding-sandboxed-containers.adoc
45

56
[id="security-compliance-nist_{context}"]
67
= Understanding compliance and risk management
78

9+
ifeval::["{context}" == "understanding-sandboxed-containers"]
10+
{sandboxed-containers-first} can be used on FIPS enabled clusters.
11+
12+
When running in FIPS mode, {sandboxed-containers-first} components, VMs, and VM images are adapted to comply with FIPS.
13+
endif::[]
14+
815
ifndef::openshift-origin[]
916
FIPS compliance is one of the most critical components required in
1017
highly secure environments, to ensure that only supported cryptographic
@@ -19,4 +26,3 @@ endif::openshift-origin[]
1926
To understand Red Hat's view of {product-title} compliance frameworks, refer
2027
to the Risk Management and Regulatory Readiness chapter of the
2128
link:https://access.redhat.com/articles/5059881[OpenShift Security Guide Book].
22-

sandboxed_containers/understanding-sandboxed-containers.adoc

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,4 @@ Sandboxed containers are only supported on bare metal.
2727
include::modules/sandboxed-containers-common-terms.adoc[leveloffset=+1]
2828
include::modules/sandboxed-containers-building-blocks.adoc[leveloffset=+1]
2929
include::modules/sandboxed-containers-rhcos-extensions.adoc[leveloffset=+1]
30-
31-
.Additional resources
32-
33-
* xref:../post_installation_configuration/machine-configuration-tasks.adoc#rhcos-add-extensions_post-install-machine-configuration-tasks[Adding extensions to RHCOS]
30+
include::modules/security-compliance-nist.adoc[leveloffset=+1]

0 commit comments

Comments
 (0)