K8s: fips content for duckburg

[kaitlynmichael]

Note

Low Risk
Documentation-only changes with no runtime, security logic, or deployment behavior modifications.

Overview
Adds FIPS compliance documentation under Kubernetes security.

A new Compliance section on the security index links to a dedicated page. The new page explains FIPS 140-3 mode (operator 8.2.0+), platform prerequisites (FIPS-configured nodes, amd64 only), enabling via spec.securityContext.fips.enabled on RedisEnterpriseCluster, and how the operator selects .fips image tags versus digest-pinned images.

^{Reviewed by Cursor Bugbot for commit 70694a7. Bugbot is set up for automated code reviews on this repo. Configure here.}

[github-actions]

Staging links:
https://redis.io/docs/staging/k8s-fips-duckburg/operate/kubernetes/security/
https://redis.io/docs/staging/k8s-fips-duckburg/operate/kubernetes/security/fips/

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

There are 2 total unresolved issues (including 1 from previous review).

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 7f63f36. Configure here.}

[kaitlynmichael]

@heinrich-redislabs — moving the open FIPS questions out of an in-page draft comment (removed so it doesn't ship in the published page source) into the PR. These are what I need confirmed for the FIPS page:

1. Platforms — OpenShift-in-FIPS-mode only, or also GKE/EKS/AKS with FIPS-configured nodes? (The design doc hinted non-OpenShift may need an env var/configmap hint — did that ship in 8.2.0?)
2. Host prerequisites — what must customers do on the nodes beyond the flag? A link to the relevant Red Hat FIPS doc would help.
3. Scope — is compliance scoped to the Redis Enterprise cluster workload only, not the operator itself? (The operator CSV still sets features.operators.openshift.io/fips-compliant: "false".)
4. arm64 — the FIPS RE image is amd64-only. Does enabling on arm64 fail, or do we just document not to?
5. Verification — recommended way for a customer to confirm the cluster is actually running in FIPS mode?

[mich-elle-luna]

Need to remove the agent-builder files changes, but otherwise is fine, thank you!

[github-actions]

🧠 Redis Memory

Found 5 related items from repository history:

• PR — K8s: CNCF compliant

• PR — K8s: 8.2.0 Duckburg release docs

• Commit — Staging links:
  https://redis.io/docs/staging/k8s-fips-duckburg/develop/ai/agent-builder/
  https://redis.io/docs/st

  Staging links:
  https://redis.io/docs/staging/k8s-fips-duckburg/develop/ai/agent-builder/
  https://redis.io/docs/staging/k8s-fips-duckb

• PR — K8s: RBAC feature

• PR — k8s api docs 8.2.0-10

  k8s api docs 8.2.0-10

Memory updated at 70694a7