Skip to content

v5.8.15-rc8

v5.8.15-rc8: Fix release 5.8.15 FIPS plugin compiler (#8467)
@buger buger tagged this 07 Jul 14:53 
### **User description**
## Summary
- align the FIPS plugin compiler with the v5.8.15 FIPS gateway native Go
FIPS build
- replace legacy GOEXPERIMENT=boringcrypto with GOFIPS140=v1.0.0 for the
FIPS compiler image
- leave standard and EE plugin compiler build args unchanged

## Validation
- parsed plugin-compiler workflow YAML locally
- ran git diff --check

This is intended to generate a new v5.8.15 RC compiler image for
compatibility testing against the existing tyk-gateway-fips:v5.8.15
image.


___

### **PR Type**
Bug fix


___

### **Description**
- Switch FIPS builds to `GOFIPS140`

- Remove legacy `boringcrypto` build tag

- Align compiler image with gateway FIPS


___

### Diagram Walkthrough


```mermaid
flowchart LR
  wf["Workflow FIPS build args"]
  df["Compiler Dockerfile env args"]
  gofips["GOFIPS140=v1.0.0 enabled"]
  boring["Legacy boringcrypto removed"]
  compat["Gateway FIPS build compatibility"]

  wf -- "passes" --> gofips
  df -- "exposes" --> gofips
  wf -- "drops old tag/experiment" --> boring
  gofips -- "aligns with" --> compat
```



<details> <summary><h3> File Walkthrough</h3></summary>

<table><thead><tr><th></th><th align="left">Relevant
files</th></tr></thead><tbody><tr><td><strong>Configuration
changes</strong></td><td><table>
<tr>
  <td>
    <details>
<summary><strong>plugin-compiler-build.yml</strong><dd><code>Update
workflow for modern FIPS build</code>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; </dd></summary>
<hr>

.github/workflows/plugin-compiler-build.yml

<ul><li>Update FIPS workflow build args<br> <li> Remove
<code>boringcrypto</code> from <code>BUILD_TAG</code><br> <li> Replace
<code>GOEXPERIMENT</code> with <code>GOFIPS140=v1.0.0</code></ul>


</details>


  </td>
<td><a
href="https://github.com/TykTechnologies/tyk/pull/8467/files#diff-f3a95a900eb0ac23af6314e9cdea29fa16af0a9bcb61793a83a32ff13d4c4e79">+2/-2</a>&nbsp;
&nbsp; &nbsp; </td>

</tr>
</table></td></tr><tr><td><strong>Bug fix</strong></td><td><table>
<tr>
  <td>
    <details>
<summary><strong>Dockerfile</strong><dd><code>Switch Dockerfile to
`GOFIPS140` support</code>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
&nbsp; </dd></summary>
<hr>

ci/images/plugin-compiler/Dockerfile

<ul><li>Replace Docker build arg <code>GOEXPERIMENT</code><br> <li>
Export <code>GOFIPS140</code> as container environment<br> <li> Keep
compiler image aligned with workflow inputs</ul>


</details>


  </td>
<td><a
href="https://github.com/TykTechnologies/tyk/pull/8467/files#diff-0ded1ed63ca128bd2d22721b0bc19dc85e440e4922164f465ac647917321971e">+2/-2</a>&nbsp;
&nbsp; &nbsp; </td>

</tr>
</table></td></tr></tr></tbody></table>

</details>

___
Assets 2
Loading