fips: route cryptography through AWS-LC, remove OpenSSL from the dependency tree - #6828

Draft

gz wants to merge 19 commits into

mainfrom

fips-full-stack

Commits on Aug 15, 2026

fips: route all cryptography through AWS-LC
gz
committed
7601db1
api: remove the Swagger UI
gz
committed
f2f6c12
deps: keep native-tls out of the dependency tree
gz
committed
a6a7287
observability: remove Sentry
gz
committed
58bef67
ci: fail when a second TLS implementation enters the dependency tree
gz
committed
866ecd6
deps: take etl from the feldera fork for its sqlx TLS backend
gz
committed
aa754f5
deps: take feldera-cloud1-client 0.1.3
gz
committed
e3fb1d7
deps: move the remaining rustls consumers to aws-lc-rs
gz
committed
309b4ba
build: build librdkafka against AWS-LC
gz
committed
9dba284
deps: link librdkafka dynamically, dropping openssl-sys
gz
committed
d34103b
ci: reject openssl-sys and a duplicate AWS-LC in the dependency tree
gz
committed
c11fcae
deps: take aws-lc-rs 1.18.0
gz
committed
1834e30
ci: keep libssl-dev in the CI image for the cloud repository
gz
committed
7d93901
ci: take the feldera-dev image that carries librdkafka
gz
committed
315eb68
build: patch librdkafka with awk rather than perl
gz
committed
fad7321
deps: floor aws-sigv4 at 1.4.5, where SigV4a left ring
gz
committed
c001453
ci: drop libssl-dev from the build image
gz
committed
fabf358
build: build librdkafka against AWS-LC v5.5.0, matching aws-lc-sys
gz
committed
e9e4499
ci: take the feldera-dev image built without libssl-dev
gz
committed
010ab20