Skip to content

Document FIPS Elastic Agent on macOS and Fleet handling of non-FIPS integrations - #9163

Open
vishaangelova wants to merge 9 commits into
mainfrom
fips-9.6-macos-catalog
Open

Document FIPS Elastic Agent on macOS and Fleet handling of non-FIPS integrations#9163
vishaangelova wants to merge 9 commits into
mainfrom
fips-9.6-macos-catalog

Conversation

@vishaangelova

@vishaangelova vishaangelova commented Nov 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Member

Summary

Contributes to docs-content-internal#2097. Follows up on docs-content#8986.

  • Documents the FIPS Elastic Agent on macOS (9.6), which doesn't include Fleet Server (elastic-agent#16363).
  • Updates the FIPS pointer on the Install Elastic Agents page.
  • Adds a section on how Fleet handles integrations that aren't FIPS compatible: warnings from 9.2 (kibana#233134), and hiding and blocking when Kibana runs in FIPS mode from 9.6 (kibana#294706).

The FIPS package registry images and Managed integrations on FedRAMP Moderate will follow in separate PRs.

Generative AI disclosure

  1. Did you use a generative AI (GenAI) tool to assist in creating this contribution?
  • Yes
  • No

Tool(s) and model(s) used: Cursor with Claude

vishaangelova and others added 3 commits November 3, 2026 12:01
@vishaangelova @cursoragent
Document FIPS Elastic Agent on macOS (9.6)
8cd5cd4 
Split the platform table row so Elastic Agent (Linux, Windows, macOS)
and Fleet Server (Linux, Windows) show different 9.6+ platforms, and add
a macOS entry to the downloads list. The macOS FIPS package doesn't
include Fleet Server, so it can't act as one but can enroll in a FIPS
Fleet Server on Linux or Windows.

Part of elastic/docs-content-internal#2097

Co-authored-by: Cursor <cursoragent@cursor.com>
@vishaangelova @cursoragent
Update FIPS pointer on Install Elastic Agents page
63f1a30 
Replace the stale admonition (preview 9.1, Linux only, {{fleet}} instead
of {{fleet-server}}) with a plain paragraph scoped to Elastic Agent that
points to the FIPS ingest page for platforms and standards. Align the
applies_to on both pages to preview 9.1-9.2, ga 9.3+.

Part of elastic/docs-content-internal#2097

Co-authored-by: Cursor <cursoragent@cursor.com>
@vishaangelova @cursoragent
Document how Fleet handles integrations that aren't FIPS compatible
162fb7c 
Add a section to the FIPS ingest page covering the 9.2+ Fleet UI
warnings and the 9.6+ catalog hiding and install blocking when Kibana
runs in FIPS mode, with a back-link from the limitations list. Add a
pointer from the Kibana FIPS page under Enable FIPS mode.

Part of elastic/docs-content-internal#2097

Co-authored-by: Cursor <cursoragent@cursor.com>
@github-actions

github-actions Bot commented Nov 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Elastic Docs AI PR menu

Check the box to run an AI review for this pull request.

Powered by GitHub Agentic Workflows and docs-actions. For more information, reach out to the docs team.

@github-actions

github-actions Bot commented Nov 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

🔍 Preview links for changed docs

@github-actions

github-actions Bot commented Nov 3, 2026

Copy link
Copy Markdown
Contributor

✅ Elastic Docs Style Checker (Vale)

No issues found on modified lines!

The Vale linter checks documentation changes against the Elastic Docs style guide. To use Vale locally or report issues, refer to Elastic style guide for Vale.

@vishaangelova
vishaangelova marked this pull request as ready for review November 3, 2026 11:48
@vishaangelova
vishaangelova requested review from a team as code owners November 3, 2026 11:48
@github-actions

github-actions Bot commented Nov 3, 2026

Copy link
Copy Markdown
Contributor

Docs review summary

Issue satisfaction

I couldn't read https://github.com/elastic/docs-content-internal/issues/2097, so I can't assess whether this PR satisfies it.

Review coverage
  • Content type: Overview and reference updates to existing pages (FIPS mode for Ingest tools, FIPS mode for Kibana, Install Elastic Agents). The new section fits the surrounding pattern.
  • Checked: user focus, technical accuracy, applicability, maintainability, language, and style.
  • Not checked: technical accuracy of the version claims (9.2 warnings, 9.6 hiding and blocking, macOS FIPS Elastic Agent in 9.6). Linked code PRs weren't read, and an SME needs to confirm them. The open questions in the PR description about Elastic Defend and epr.elastic.co also need an SME answer.
  • UI labels: not verified.

Generated from Docs review agent · ◷

Was this review helpful? When the PR closes, add the label ai-review:helpful or ai-review:unhelpful to it.

wajihaparvez
wajihaparvez approved these changes Nov 3, 2026
View reviewed changes

@wajihaparvez wajihaparvez left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Admin stuff LGTM, thank you!

Comment thread deploy-manage/security/fips-ingest.md Resolved
Comment thread deploy-manage/security/fips-ingest.md Resolved
criamico
criamico approved these changes Nov 4, 2026
View reviewed changes

@criamico criamico left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@vishaangelova @wajihaparvez
Apply suggestion from @wajihaparvez
5ac2804 
Co-authored-by: wajihaparvez <wajiha.parvez@elastic.co>
@vishaangelova @cursoragent
Note the package registry version required for hiding integrations fr…
2645ab4 
…om the catalog

Co-authored-by: Cursor <cursoragent@cursor.com>
vishaangelova
vishaangelova commented Nov 4, 2026
View reviewed changes
Comment thread deploy-manage/security/fips-ingest.md Resolved
@vishaangelova vishaangelova mentioned this pull request Nov 4, 2026
Open
1 of 2 tasks
nimarezainia
nimarezainia approved these changes Nov 4, 2026
View reviewed changes

@nimarezainia nimarezainia left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@vishaangelova vishaangelova mentioned this pull request Nov 5, 2026
Open
1 of 2 tasks
alexandra5000
alexandra5000 approved these changes Nov 5, 2026
View reviewed changes
Comment thread deploy-manage/security/fips-ingest.md Resolved
Comment thread deploy-manage/security/fips-ingest.md Resolved
@vishaangelova

vishaangelova commented Nov 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Member Author

I added one more change to this PR (1a6e573): the APM Server row in the FIPS ingest table now reads 9.1–9.5 for FIPS 140-2 and 9.6+ for FIPS 140-3, and APM Server is added to the "FIPS 140-3 compliant" statement below the table.

I made this change after discussing it with @kruskall. Technically, APM Server has used the native Go FIPS 140-3 module since 9.3.8, 9.4.4, and 9.5.0 (apm-server#20995), but he's fine with listing 9.6 as the official version, to match the other ingest tools and the preference to state 9.6 as the version where FIPS 140-3 support starts.

This branch was successfully deployed

1 active deployment
docs-preview — 1a6e5737 Deployed Nov 6, 2026 by github-actions[bot]
View deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@criamico criamico criamico approved these changes
@nimarezainia nimarezainia nimarezainia approved these changes
@alexandra5000 alexandra5000 alexandra5000 approved these changes
@wajihaparvez wajihaparvez wajihaparvez approved these changes
@ebeahan ebeahan Awaiting requested review from ebeahan
@younginseattle younginseattle Awaiting requested review from younginseattle
@kruskall kruskall Awaiting requested review from kruskall

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@vishaangelova @nimarezainia @criamico @alexandra5000 @wajihaparvez