Compliance of the supervisor with FIPS mode

Configure the GODEBUG environment variable for uninterrupted operation of supervisors and sidecars in FIPS mode.

The supervisor and its managed sidecars operate in FIPS mode when the Splunk Enterprise instance is configured for FIPS compliance. For information about FIPS configuration, see [Secure Splunk Enterprise with FIPS]. For more information about FIPS mode, see Secure Splunk Enterprise with FIPS.

GODEBUG configuration

GODEBUG is an environment variable for Go (Golang) programs that controls runtime debugging and operational features.

In FIPS mode, the following GODEBUG settings are required:
  • For the supervisor: GODEBUG=fips140=on
  • For sidecars: GODEBUG=fips140=only
Note: Splunk Enterprise automatically configures the required FIPS settings for the supervisor and sidecars when FIPS mode is enabled.

Environment variables - restrictions

The supervisor fails if the GODEBUG=fips140=only environment variable is set. To resolve this, remove the fips140=only setting or replace it with fips140=on.

The supervisor process fails to start if the GODEBUG=fips140=only setting is present in the environment. This strict FIPS setting is incompatible with the operational requirements of the supervisor. This issue often occurs when environment variables set at the host level for other applications are accidentally propagated to the supervisor through the Splunk process. To avoid this issue, remove the fips140=only setting from your environment or replace it with fips140=on.