Skip to content

[9.0](backport #4574) Add DRA FIPS artifacts to package pipeline #4934

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: 9.0
Choose a base branch
from

Conversation

mergify[bot]
Copy link
Contributor

@mergify mergify bot commented May 19, 2025

What is the problem this PR solves?

Provide FIPS dra artifacts.

How does this PR solve the problem?

Add FIPS="true" env flag to packageing pipeline.
Packaging pipline uses microsoft/go instead of golang/go to build DRA artifacts for FIPS.
Change package name from fleet-server-*-fips to fleet-server-fips-*.

Design Checklist

  • I have ensured my design is stateless and will work when multiple fleet-server instances are behind a load balancer.
  • I have or intend to scale test my changes, ensuring it will work reliably with 100K+ agents connected.
  • I have included fail safe mechanisms to limit the load on fleet-server: rate limiting, circuit breakers, caching, load shedding, etc.

Checklist

  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • I have made corresponding change to the default configuration files
  • I have added tests that prove my fix is effective or that my feature works
  • I have added an entry in ./changelog/fragments using the changelog tool

Related issues


This is an automatic backport of pull request #4574 done by [Mergify](https://mergify.com).

Add FIPS="true" env flag to packageing pipeline.
Packaging pipline uses microsoft/go instead of golang/go to build DRA artifacts for FIPS.
Change package name from fleet-server-*-fips to fleet-server-fips-*.

(cherry picked from commit 8bb8c74)
@mergify mergify bot requested a review from a team as a code owner May 19, 2025 17:58
@mergify mergify bot added the backport label May 19, 2025
@mergify mergify bot requested review from michalpristas and swiatekm May 19, 2025 17:58
@prodsecmachine
Copy link

prodsecmachine commented May 19, 2025

🎉 Snyk checks have passed. No issues have been found so far.

security/snyk check is complete. No issues have been found. (View Details)

license/snyk check is complete. No issues have been found. (View Details)

@github-actions github-actions bot added Team:Elastic-Agent-Control-Plane Label for the Agent Control Plane team tech debt labels May 19, 2025
Copy link

Quality Gate failed Quality Gate failed

Failed conditions
1 Security Hotspot

See analysis details on SonarQube

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport Team:Elastic-Agent-Control-Plane Label for the Agent Control Plane team tech debt
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants