Skip to content

feat: add Azure Container Linux CVM FIPS image - #9777

Draft
Ankita Pareek (Ankita13-code) wants to merge 2 commits into
mainfrom
ankitapareek/acl-cvm-fips
Draft

Ankita Pareek (Ankita13-code) wants to merge 2 commits into
mainfrom
ankitapareek/acl-cvm-fips

Conversation

@Ankita13-code

Copy link
Copy Markdown
Contributor

What type of PR is this?

/area agentbaker
/area vhd
/kind feature

What this PR does / why we need it

Adds the dedicated aks-acl-cvm-gen2-fips distro and aclgen2CVMFips SIG definition. Adds an x64 release job that builds through the ACL CVM path with FEATURE_FLAGS=cvm and ENABLE_FIPS=True.

The new definition remains excluded from GetMaintainedLinuxSIGImageConfigMap until its first image version is published.

Which issue(s) this PR fixes

Part of Azure Container Linux Confidential VM + FIPS enablement.

Requirements

  • Unit tests updated and passing (go test ./pkg/agent/datamodel ./pkg/agent)
  • Release YAML parses successfully
  • First aclgen2CVMFips image version published before removing the maintained-map skip

The commit was created through GitHub and has a valid GitHub-verified signature.

@github-actions

github-actions Bot commented Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

Windows Unit Test Results

  3 files   18 suites   45s ⏱️
563 tests 563 ✅ 0 💤 0 ❌
585 runs  585 ✅ 0 💤 0 ❌

Results for commit 6d0785a.

♻️ This comment has been updated with latest results.

Register the dedicated ACL CVM FIPS distro and SIG definition, and add a release job that builds the CVM image with FIPS enabled.

Co-authored-by: Ankita Pareek <56152556+Ankita13-code@users.noreply.github.com>

Signed-off-by: Aadhar Agarwal <aadagarwal@microsoft.com>
Signed-off-by: Aadhar Agarwal <aadagarwal@microsoft.com>
@aadhar-agarwal
aadhar-agarwal force-pushed the ankitapareek/acl-cvm-fips branch from 7aae2c9 to 6d0785a Compare October 21, 2026 00:50
@github-actions

Copy link
Copy Markdown
Contributor

Code Coverage

Package Line Rate Health
parts_windows Package 1 73% ➖
staging_cse_windows Package 1 65% ➖
debug 0% ❌
provisioningscripts 2% ❌
test 0% ❌
windows 27% ❌
Summary 38% (1652 / 6834) ❌

@github-actions

Copy link
Copy Markdown
Contributor

Code Coverage

Package Line Rate Health
github.com/Azure/agentbaker/aks-node-controller 73% ➖
github.com/Azure/agentbaker/aks-node-controller/common 100% ✔
github.com/Azure/agentbaker/aks-node-controller/helpers 68% ➖
github.com/Azure/agentbaker/aks-node-controller/parser 88% ✔
github.com/Azure/agentbaker/aks-node-controller/pkg/gpu 100% ✔
github.com/Azure/agentbaker/aks-node-controller/pkg/nodeconfigutils 89% ✔
github.com/Azure/agentbaker/aks-node-controller/utils 0% ❌
github.com/Azure/agentbaker/apiserver 24% ❌
github.com/Azure/agentbaker/cmd 0% ❌
github.com/Azure/agentbaker/cmd/starter 0% ❌
github.com/Azure/agentbaker/fuzz/api 0% ❌
github.com/Azure/agentbaker/hotfix/render-nodecustomdata 0% ❌
github.com/Azure/agentbaker/pkg/agent 78% ➖
github.com/Azure/agentbaker/pkg/agent/datamodel 77% ➖
github.com/Azure/agentbaker/pkg/agent/toggles 0% ❌
github.com/Azure/agentbaker/pkg/vhdbuilder/datamodel 87% ✔
Summary 75% (5736 / 7647) ➖

@github-actions

Copy link
Copy Markdown
Contributor

Code Coverage

Package Line Rate Health
shellspec spec 28% ❌
Summary 28% (4518 / 15935) ❌

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants