Add FIPS build option for the authservice.

istio-ecosystem / authservice

Move OIDC token acquisition out of your app code and into the Istio mesh

Apache License 2.0

217 stars 63 forks source link

Add FIPS build option for the authservice. #194

Closed incfly closed 2 years ago

incfly commented 2 years ago

This PR removes the authservice self defined boringssl dependency. Instead we starts to use @envoy/bazel:boringssl directly. This allows us to leverage all the boringssl BUILD rules from Envoy directly. An example invocation

https://github.com/istio-ecosystem/authservice/issues/192

# Clang must be used.
bazel build //src/main:all  --config clang  --define boringssl=fips

istio-testing commented 2 years ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: incfly, Shikugawa

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/istio-ecosystem/authservice/blob/master/OWNERS)~~ [Shikugawa,incfly] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment