Chapter 1. Federal Information Processing Standard (FIPS) readiness and compliance

Prerequisite

• If you are running a standalone deployment of Red Hat Quay, your Red Hat Enterprise Linux (RHEL) deployment is version 8 or later and FIPS-enabled.
• If you are deploying Red Hat Quay on OpenShift Container Platform, OpenShift Container Platform is version 4.10 or later.
• Your Red Hat Quay version is 3.5.0 or later.

• If you are using the Red Hat Quay on OpenShift Container Platform on an IBM Power or IBM Z cluster:

  • OpenShift Container Platform version 4.14 or later is required
  • Red Hat Quay version 3.10 or later is required
• You have administrative privileges for your Red Hat Quay deployment.

Procedure

• In your Red Hat Quay config.yaml file, set the FEATURE_FIPS configuration field to True. For example:

  ---
  FEATURE_FIPS = true
  ---

  Copy to Clipboard Toggle word wrap

  With FEATURE_FIPS set to True, Red Hat Quay runs using FIPS-compliant hash functions.