Is ISTIO FIPS 140-2 compliant and/or certified?
I have the same question. There is a discussion thread https://github.com/istio/istio/issues/11723 but there is no conclusion on how to build/enabel Istio for FIPS 140-2 compliance.
I am testing with an older version of Istio with istio-proxy compiled with BoringSSL-FIPS. I will share the details soon
Thanks for validating this. Do you happen to have any update on your testing after compiling istio-proxy with boringssl under fips mode ?