FIPS-enabled build of gke-deploy, which prepares and applies Kubernetes manifests to Google Kubernetes Engine clusters. The command surface matches the standard gke-deploy image. The binary, the kubectl it shells out to, the GKE auth plugin kubectl loads, and the bundled kustomize are all FIPS builds routing cryptography through the validated OpenSSL provider; gcloud and gsutil come from the standard google-cloud-sdk package, which has no FIPS build.