Strimzi operator does not work on non-FIPS node
Summary
With FIPS enabled in the base image, the Strimzi operator does not work on a non-FIPS node
Steps to reproduce
On a cluster that has nodes without FIPS, run the Strimzi operator
What is the current bug behavior?
The pod crashes with the following error NSS module not available: fips
. This is a Java error, not a Strimzi error.
What is the expected correct behavior?
The Strimzi operator should work fine and get to the "Ready" state
Relevant logs and/or screenshots
Possible fixes
Following the guide at https://access.redhat.com/solutions/5696401, the security.useSystePropertiesFile
property in java.security
should be set to false
to turn off FIPS in Java. Because this file is only writable by root, it must be done when the image is built. Adding sed -i 's/security.useSystemPropertiesFile=true/security.useSystemPropertiesFile=false/g' ${JAVA_HOME}/conf/security/java.security
to the Dockerfile would fix this.
Defintion of Done
-
Bug has been identified and corrected within the container