Skip to content

[eck]: Document fips for 3.5.0 - #7907

Open
moukoublen wants to merge 5 commits into
mainfrom
eck_fips_350
Open

[eck]: Document fips for 3.5.0#7907
moukoublen wants to merge 5 commits into
mainfrom
eck_fips_350

Conversation

@moukoublen

Copy link
Copy Markdown
Member

Add documentation for ECK FIPS for version 3.5.0

@moukoublen
moukoublen requested a review from a team as a code owner August 11, 2026 13:18
@github-actions

Copy link
Copy Markdown
Contributor

Elastic Docs AI PR menu

Check the box to run an AI review for this pull request.

  • Review docs changes (docs-review). Status: not started.

Powered by GitHub Agentic Workflows and docs-actions. For more information, reach out to the docs team.

@github-actions

github-actions Bot commented Aug 11, 2026

Copy link
Copy Markdown
Contributor

🔍 Preview links for changed docs

@github-actions

Copy link
Copy Markdown
Contributor

✅ Elastic Docs Style Checker (Vale)

No issues found on modified lines!


The Vale linter checks documentation changes against the Elastic Docs style guide. To use Vale locally or report issues, refer to Elastic style guide for Vale.

Comment thread deploy-manage/deploy/cloud-on-k8s/deploy-fips-compatible-version-of-eck.md Outdated
…on-of-eck.md

Co-authored-by: Vlada Chirmicci <vlada.chirmicci@elastic.co>

@yetanothertw yetanothertw left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thank you! 🚀

* Using FIPS approved / NIST recommended cryptographic algorithms.
* Compiling the operator using the [BoringCrypto](https://github.com/golang/go/blob/dev.boringcrypto/README.boringcrypto.md) library for various cryptographic primitives.
* {applies_to}`eck: ga 3.5+` Using Go's native [FIPS 140-3 cryptographic module](https://go.dev/doc/security/fips140). The build pins the Go Cryptographic Module at v1.0.0 ([CMVP Certificate #5247](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5247)), which is the certified version.
* {applies_to}`eck: deprecated 3.5` Compiling the operator using the [BoringCrypto](https://github.com/golang/go/blob/dev.boringcrypto/README.boringcrypto.md) library for various cryptographic primitives.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is this still happening in 3.5, or was it replaced by the go module? if it no longer happens in 3.5 ...

Suggested change
* {applies_to}`eck: deprecated 3.5` Compiling the operator using the [BoringCrypto](https://github.com/golang/go/blob/dev.boringcrypto/README.boringcrypto.md) library for various cryptographic primitives.
* {applies_to}`eck: ga 3.0-3.4` Compiling the operator using the [BoringCrypto](https://github.com/golang/go/blob/dev.boringcrypto/README.boringcrypto.md) library for various cryptographic primitives.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

could consider putting these two bullets under a parent bullet about complilation or whatever, indicating the method differs by version

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants