Add separate yaml files just to enable the fips element

This simply allows a FIPS image to be created or not, rather than images being FIPS by default.
openstack-k8s-operators · Feb 15, 2024 · 9fc3288 · 9fc3288
1 parent e0efdad
commit 9fc3288
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 0 deletions.
diff --git a/README.rst b/README.rst
@@ -26,6 +26,11 @@ master branch ``current-podified`` by running::
 
     diskimage-builder ./images/edpm-hardened-uefi-centos-9-stream.yaml
 
+To create a FIPS enabled image, add ``edpm-hardened-uefi-fips.yaml`` to
+include the ``fips`` element::
+
+    diskimage-builder ./images/edpm-hardened-uefi-centos-9-stream.yaml ./images/edpm-hardened-uefi-fips.yaml
+
 See dib/repo-setup/README.md for environment variables to control which RDO
 repositories to configure.
 

diff --git a/images/edpm-hardened-uefi-fips.yaml b/images/edpm-hardened-uefi-fips.yaml
@@ -0,0 +1,4 @@
+- imagename: edpm-hardened-uefi
+  elements:
+  # Additional element to enable fips for other image defintion
+  - fips
diff --git a/images/ironic-python-agent-fips.yaml b/images/ironic-python-agent-fips.yaml
@@ -0,0 +1,4 @@
+- imagename: ironic-python-agent
+  elements:
+  # Additional element to enable fips for other image defintion
+  - fips