openstack/governance
Code Issues Proposed changes

Move FIPS Compliance goal back to proposed

Browse Source 
The FIPS Compliance goal is being moved from selected back to proposed
status due to ongoing challenges with testing infrastructure and lack
of community resources to address them.

Current blockers preventing the goal from moving forward:

* Lack of clear testing definitions and procedures for FIPS compliance
  validation across OpenStack projects

* Confusion within the community about testing requirements and
  acceptable testing platforms

* CentOS Stream 9, which was previously identified as the primary
  testing platform, cannot be used reliably to test for FIPS compliance
  due to stability issues

* CentOS Stream 10 is not yet compatible with devstack, preventing
  migration to a newer testing platform

* Alternative distributions such as Alma Linux or Rocky Linux could
  potentially be explored as testing platforms, but require investigation
  and validation

* Most critically, we lack volunteers to lead the testing infrastructure
  effort and coordinate FIPS compliance validation across projects

The goal remains valuable and important for organizations in regulated
industries. We encourage interested community members to step forward
to help establish reliable FIPS testing infrastructure and drive this
goal forward.

This goal can be reconsidered for selection once:
1. A stable and reliable FIPS testing platform is identified and validated
2. Clear testing procedures are documented
3. A champion emerges to coordinate the testing efforts across projects

Change-Id: I2657d481c4ea7830ffba7642bcc95dbb337c489a
Signed-off-by: Goutham Pacha Ravi <gouthampravi@gmail.com>
This commit is contained in:
Goutham Pacha Ravi
2025-12-01 11:46:47 -08:00
parent 282b29ddb4
commit df430585db
1 changed files with 0 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files