node_exporter
node_exporter copied to clipboard
Added fips collector for exposing fips_enabled status
Hi @SuperQ @discordianfish
Add a fips collector to expose if fips is enabled or not. To check fips is enabled or not can be done by
[root@localhost ~]# cat /proc/sys/crypto/fips_enabled
0
[root@localhost ~]#
Federal Information Processing Standards (FIPS) is used to verify compliance with FIPS 140-2 security requirements for cryptographic modules.
# HELP node_fips_status FIPS status (0-disabled/1-enabled) from /proc/sys/crypto/fips_enabled.
# TYPE node_fips_status gauge
node_fips_status 0
Have kept fips collector Disabled by default.
Signed-off-by: Aditya Borgaonkar [email protected]
@discordianfish , So in /proc/sys/crypto dir there is only fips_enabled file. In that case, Do I need to create similar collector in https://github.com/prometheus/procfs and it will be synced in this repository?
@adityaborgaonkar Yes, add the parsing to procfs and after merging it you can bump the procfs dependency in go.mod here