How to deploy Insights in a FIPS-enabled cluster

Deploy Insights on dedicated non-FIPS node in FIPS-enabled OpenShift cluster.

Insights does not currently support FIPS. However, you can deploy Insights in a FIPS-enabled cluster by running it on a dedicated non-FIPS node using node selectors and tolerations.

Take the following steps:

1. Add a non-FIPS node to your FIPS-enabled cluster.

2. Apply a taint to the non-FIPS node to prevent other workloads from scheduling on it, and assign it a label that matches the node selector you will configure in the next step.

3. In the input.json file, configure Insights to run exclusively on the non-FIPS node using node selectors and tolerations:

   {
     "insights": {
       "enabled": true,
       "advanced_configuration": {
         "global": {
           "nodeSelectorLabels": {
             "nodename": "insights"
           },
           "tolerations": [
             {
               "key": "insights",
               "operator": "Equal",
               "value": "true",
               "effect": "NoSchedule"
             }
           ]
         }
       }
     }
   }
   

   Note:

   Make sure the nodeSelectorLabels and tolerations match the labels and taints you applied to your non-FIPS node.

4. Apply the configuration by rerunning the Automation Suite installer.