Commit 67b52d6
committed
Enable FIPS compliance enforcement for prometheus-operator build
Explicitly set OPENSHIFT_CI=1 and GO_COMPLIANCE_POLICY
to enable the Go compliance shim in openshift-golang-builder.
This ensures:
- CGO_ENABLED=1 (dynamic linking to OpenSSL)
- GOEXPERIMENT=strictfipsruntime automatically added
- Build fails if FIPS requirements not met
Without OPENSHIFT_CI=1, the shim defaults to "exempt_all" policy and
bypasses all FIPS compliance checks.
Signed-off-by: Daniel Mellado <dmellado@fedoraproject.org>1 parent 9de1c88 commit 67b52d6
1 file changed
+2
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
5 | 5 | | |
6 | 6 | | |
7 | 7 | | |
8 | | - | |
| 8 | + | |
| 9 | + | |
9 | 10 | | |
10 | 11 | | |
11 | 12 | | |
| |||
0 commit comments