Skip to content

Commit 60f8bee

Browse files
CSPL-3586: Document FIPS Compliance for SOK (#1501)
* document FIPS compliance for SOK * copilot updates * add line space
1 parent c99d2c3 commit 60f8bee

File tree

2 files changed

+10
-4
lines changed

2 files changed

+10
-4
lines changed

docs/ChangeLog.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,8 @@
44

55
* This is the 2.8.0 release. The Splunk Operator for Kubernetes is a supported platform for deploying Splunk Enterprise with the prerequisites and constraints laid out [here](https://github.com/splunk/splunk-operator/blob/main/docs/README.md#prerequisites-for-the-splunk-operator)
66

7+
* CSPL-3586 - Certify FIPS 140-3 Compliance
8+
79
* CSPL-3624 - Update Helm Charts for 2.8.0 Support
810

911
* CSPL-3673 - Github Issue #1157: Failed to install the operator - CRD metadata.annotations too long

docs/Security.md

Lines changed: 8 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ The procedures to secure your deployment are the same regardless of your choice
1919
|Splunk Web | Gateway Termination | NO |
2020
|REST API | Gateway Termination | NO |
2121

22-
For more information about how to setup Ingress Controllers using the Operator visit [Ingress Documentation](https://github.com/splunk/splunk-operator/blob/develop/docs/Ingress.md).
22+
For more information about how to setup Ingress Controllers using the Operator visit [Ingress Documentation](https://github.com/splunk/splunk-operator/blob/main/docs/Ingress.md).
2323

2424
## Prerequisites
2525

@@ -74,7 +74,7 @@ privKeyPath = $SPLUNK_HOME/etc/apps/myapp/mycerts/mySplunkPrivateKey.key
7474
serverCert = $SPLUNK_HOME/etc/apps/myapp/mycerts/mySplunkCertificate.pem
7575
```
7676

77-
* Deploy the app to the Splunk Enterprise instance. See [Install Apps using Splunk Operator](https://github.com/splunk/splunk-operator/blob/develop/docs/Examples.md#installing-splunk-apps).
77+
* Deploy the app to the Splunk Enterprise instance. See [Install Apps using Splunk Operator](https://github.com/splunk/splunk-operator/blob/main/docs/Examples.md#installing-splunk-apps).
7878

7979
* Create the Ingress configuration to allow access to port 8000. This configuration creates a gateway and virtual service for passing the traffic through to the Splunk Enterprise instance.
8080

@@ -219,9 +219,13 @@ Learn more about APIs available here: [REST Manual](https://docs.splunk.com/Docu
219219

220220
## Securing Forwarders
221221

222-
For examples on configuring the Ingress controller to accept data from Forwarders, and securing the data in Kubernetes, see: [Secure Forwarding](https://github.com/splunk/splunk-operator/blob/develop/docs/Ingress.md)
222+
For examples on configuring the Ingress controller to accept data from Forwarders, and securing the data in Kubernetes, see: [Secure Forwarding](https://github.com/splunk/splunk-operator/blob/main/docs/Ingress.md)
223223

224224

225225
## Password Management
226226

227-
In Kubernetes, sensitive information such as passwords, OAuth tokens, and ssh keys should be stored using the Secrets objects. Learn how to manage your passwords for Splunk Enterprise deployments in: [Password Management](https://github.com/splunk/splunk-operator/blob/develop/docs/PasswordManagement.md)
227+
In Kubernetes, sensitive information such as passwords, OAuth tokens, and ssh keys should be stored using the Secrets objects. Learn how to manage your passwords for Splunk Enterprise deployments in: [Password Management](https://github.com/splunk/splunk-operator/blob/main/docs/PasswordManagement.md)
228+
229+
## Using a FIPS 140-3 Enabled Cluster
230+
231+
The Splunk Operator for Kubernetes is fully certified to run on FIPS 140-3 compliant clusters. No modifications to the provided container images are required. To get started, simply create a Kubernetes cluster with FIPS-compliant nodes and follow the standard [installation guide](https://github.com/splunk/splunk-operator/blob/main/docs/Install.md) to deploy the operator.

0 commit comments

Comments
 (0)