Skip to content

Delete FIPS container-image build workflows (coder-fips.yml, images.yml) #4

@ausbru87

Description

@ausbru87

Context

Part of the FIPS-removal effort. See REMOVE_FIPS_PLAN.md for the full plan and premise.

Premise: Coder is not a FIPS boundary component; upstream LBs/proxies handle FIPS-validated TLS. We are removing the custom FIPS container image build pipelines.

Scope

Delete the two GitHub Actions workflows that exist solely to build and push FIPS images.

Files to delete

  • .github/workflows/coder-fips.yml — builds Coder with GOFIPS140=latest, tags -fips / latest-fips, pushes to ECR.
  • .github/workflows/images.yml — builds base-fips and desktop-fips workspace images, pushes to ECR.

Files to leave unchanged

  • .github/workflows/terraform.yml — runs fmt/validate/tflint/trivy. No FIPS content.

Acceptance criteria

  • ls .github/workflows/ shows only terraform.yml.
  • The GitHub Actions tab no longer lists "Coder FIPS Build" or "Workspace FIPS Images" workflows (they auto-archive on workflow file deletion).
  • grep -rin fips .github/ returns nothing.

Dependencies

None on other code units.

Follow-on

The GitHub repo secrets AWS_ROLE_ARN and ECR_REGISTRY used by these workflows will be orphaned after this merges. Their deletion is handled by the cleanup-fips-secrets.sh script issue (Issue 7 in the plan — committed, everything-as-code, not an operator checklist).

The aws_iam_role.github_actions IAM role that these workflows assumed is removed by the Terraform cleanup issue (Issue 3).

Metadata

Metadata

Assignees

No one assigned

    Labels

    ciCI / GitHub ActionscleanupDead code / cruft removalfips-removalRemove FIPS build/endpoint logic

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions