From 643851291a02d6d937779e84ed04e8b3d6a9dddc Mon Sep 17 00:00:00 2001 From: Margo Crawford Date: Tue, 15 Mar 2022 08:33:21 -0700 Subject: [PATCH] fips-only kubecertagent Signed-off-by: Margo Crawford --- cmd/pinniped-concierge-kube-cert-agent/fips_strict.go | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 cmd/pinniped-concierge-kube-cert-agent/fips_strict.go diff --git a/cmd/pinniped-concierge-kube-cert-agent/fips_strict.go b/cmd/pinniped-concierge-kube-cert-agent/fips_strict.go new file mode 100644 index 00000000..b3c8699a --- /dev/null +++ b/cmd/pinniped-concierge-kube-cert-agent/fips_strict.go @@ -0,0 +1,8 @@ +//go:build fips_strict +// +build fips_strict + +package main + +import ( + _ "crypto/tls/fipsonly" // restricts all TLS configuration to FIPS-approved settings. +)