[Feature] FIPS mutability

Azure / AKS

Azure Kubernetes Service

https://azure.github.io/AKS/

1.95k stars 304 forks source link

[Feature] FIPS mutability #4265

Open allyford opened 4 months ago

allyford commented 4 months ago

Currently if you have a FIPS-enabled node pool, you cannot change the node pool to non-FIPS. You also need to create a new node pool to enable FIPS.

Requirements:

Update an existing node pool to enable fips.
Update an existing node pool to disable fips.

This functionality should be supported for Linux node pools.

allyford commented 1 month ago

Public Preview announcement: Existing node pools can now be updated to enable or disable Federal Information Process Standard (FIPS). See aka.ms/aks/updatefips for more information.

allyford commented 3 weeks ago

Updating existing node pools to enable or disable FIPS is now Generally Available in the v20240805 AKS release. You can track regional availability through the AKS release tracker. If you are using ARM or bicep templates, you can use the GA feature once the release has reached the region for your cluster. The GA CLI has not yet been released but is expected in upcoming weeks.

allyford commented 2 days ago

The GA CLI for FIPS has been released: Azure CLI 2.64.0