Skip to content

Commit ac96be9

Browse files
committed
OSDOCS-3338: Added FIPS installation option to ROSA
1 parent 15173c7 commit ac96be9

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

modules/rosa-sts-interactive-cluster-creation-mode-options.adoc

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -73,6 +73,13 @@ The following table describes the interactive cluster creation mode options:
7373
|`Host prefix`
7474
|Specify the subnet prefix length assigned to pods scheduled to individual machines. The host prefix determines the pod IP address pool for each machine. For example, if the host prefix is set to `/23`, each machine is assigned a `/23` subnet from the pod CIDR address range. The default is `/23`, allowing 512 cluster nodes and 512 pods per node, both of which are beyond our supported maximums. For information on the supported maximums, see the Additional resources section below.
7575

76+
|`fips (optional)`
77+
|Enable or disable FIPS mode. The default is `false` (disabled). If FIPS mode is enabled, the {op-system-first} machines that {product-title} runs on bypass the default Kubernetes cryptography suite and use the cryptography modules that are provided with RHCOS instead.
78+
[IMPORTANT]
79+
====
80+
The use of FIPS Validated / Modules in Process cryptographic libraries is only supported on {product-title} deployments on the `x86_64` architecture.
81+
====
82+
7683
|`Encrypt etcd data (optional)`
7784
|In {product-title}, the control plane storage is encrypted at rest by default and this includes encryption of the etcd volumes. You can additionally enable the `Encrypt etcd data` option to encrypt the key values for some resources in etcd, but not the keys.
7885

0 commit comments

Comments
 (0)