Add information about enabling FIPS (#537)

* Add information about enabling FIPS * Update docs_user/modules/con_fips-support.adoc Co-authored-by: klgill <[email protected]> * Update docs_user/modules/con_fips-support.adoc Co-authored-by: klgill <[email protected]> * Update docs_user/modules/con_fips-support.adoc Co-authored-by: klgill <[email protected]> * Update docs_user/modules/con_fips-support.adoc Co-authored-by: klgill <[email protected]> --------- Co-authored-by: klgill <[email protected]>
openstack-k8s-operators · Sep 3, 2024 · 2849ac0 · 2849ac0
1 parent a3aae72
commit 2849ac0
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 0 deletions.
diff --git a/docs_user/assemblies/assembly_planning-the-new-deployment.adoc b/docs_user/assemblies/assembly_planning-the-new-deployment.adoc
@@ -25,6 +25,8 @@ include::../modules/con_about-node-selector.adoc[leveloffset=+1]
 
 include::../modules/con_about-machine-configs.adoc[leveloffset=+1]
 
+include::../modules/con_fips-support.adoc[leveloffset=+1]
+
 include::../modules/con_key-manager-service-support-for-crypto-plugins.adoc[leveloffset=+1]
 
 //include::../modules/con_identity-service-authentication.adoc[leveloffset=+1]

diff --git a/docs_user/modules/con_fips-support.adoc b/docs_user/modules/con_fips-support.adoc
@@ -0,0 +1,11 @@
+[id="fips-support_{context}"]
+
+= FIPS support
+
+If you are adopting a {rhos_prev_long} ({OpenStackShort}) {rhos_prev_ver} FIPS environment to {rhos_long} {rhos_curr_ver}, your adopted cluster remains a FIPS cluster. There is no option to change FIPS status during adoption.
+
+There is a major difference with how FIPS was configured in {OpenStackPreviousInstaller} and how it is enabled and enforced in operator deployments. In {OpenStackPreviousInstaller}, FIPS is enabled as part of its configuration, whereas in operator deployments, there is no specific FIPS configuration.
+
+If your cluster is FIPS enabled, you must deploy a FIPS {OpenShift} ({OpenShiftShort}) cluster to adopt your {OpenStackShort} {rhos_prev_ver} FIPS control plane.
+
+For more information about enabling FIPS in {OpenShiftShort}, see link:https://docs.openshift.com/container-platform/latest/installing/installing-fips.html[Support for FIPS cryptography] in _OpenShift Container Platform Documentation_.