Merge pull request #90004 from lahinson/osdocs-13524-hcp-fips

[OSDOCS-13524]: Adding FIPS details for HCP

Author: lahinson

hosted_control_planes/hcp-prepare/hcp-requirements.adoc

@@ -15,6 +15,7 @@ You can run both the management cluster and the worker nodes on-premise, such as
 In Bare Metal Host (BMH) deployments, where the Bare Metal Operator starts machines, the hosted control plane must be able to reach baseboard management controllers (BMCs). If your security profile does not permit the Cluster Baremetal Operator to access the network where the BMHs have their BMCs in order to enable Redfish automation, you can use BYO ISO support. However, in BYO mode, {product-title} cannot automate the powering on of BMHs.
 
 include::modules/hcp-support-matrix.adoc[leveloffset=+1]
+include::modules/hcp-fips.adoc[leveloffset=+1]
 
 [role="_additional-resources"]
 .Additional resources

modules/hcp-fips.adoc

@@ -0,0 +1,16 @@
+// Module included in the following assemblies:
+//
+// * hosted-control-planes/hcp-prepare/hcp-requirements.adoc
+
+
+:_mod-docs-content-type: CONCEPT
+[id="hcp-fips_{context}"]
+= FIPS-enabled hosted clusters
+
+The binaries for {hcp} are FIPs-compliant, with the exception of the {hcp} command-line interface, `hcp`.
+
+If you want to deploy a FIPS-enabled hosted cluster, you must use a FIPS-enabled management cluster. To enable FIPS mode for your management cluster, you must run the installation program from a {op-system-base-full} computer configured to operate in FIPS mode. For more information about configuring FIPS mode on {op-system-base}, see link:https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/security_hardening/switching-rhel-to-fips-mode_security-hardening[Switching {op-system-base} to FIPS mode].
+
+When running {op-system-base} or {op-system-first} booted in FIPS mode, {product-title} core components use the {op-system-base} cryptographic libraries that have been submitted to NIST for FIPS 140-2/140-3 Validation on only the x86_64, ppc64le, and s390x architectures.
+
+After you set up your management cluster in FIPS mode, the hosted cluster creation process runs on that management cluster.