add fips mode flag

This commit is contained in:
Brad White 2024-04-25 11:55:30 -06:00
parent ab96ed672e
commit 803945c759
2 changed files with 9 additions and 1 deletions

View file

@ -182,6 +182,7 @@ export function createTestEsCluster<
} = options;
const clusterName = `${CI_PARALLEL_PROCESS_PREFIX}${customClusterName}`;
const isFIPSMode = process.env.FTR_FIPS_MODE === '1';
const defaultEsArgs = [
`cluster.name=${clusterName}`,
@ -192,7 +193,12 @@ export function createTestEsCluster<
: ['discovery.type=single-node']),
];
const esArgs = assignArgs(defaultEsArgs, customEsArgs);
const esArgs = assignArgs(
defaultEsArgs,
// ML has issues running in FIPS mode due to custom OpenSSL
// Remove after https://github.com/elastic/kibana-operations/issues/96
isFIPSMode ? [...customEsArgs, 'xpack.ml.enabled=false'] : customEsArgs
);
const config = {
version: esTestConfig.getVersion(),

View file

@ -48,6 +48,8 @@ Vagrant.configure("2") do |config|
echo "export OPENSSL_MODULES=/usr/local/lib64/ossl-modules" >> /etc/profile.d/kibana-fips-env.sh
echo "export TEST_BROWSER_HEADLESS=1" >> /etc/profile.d/kibana-fips-env.sh
echo "export ES_TMPDIR=/home/vagrant/kibana/.es/tmp" >> /etc/profile.d/kibana-fips-env.sh
# Remove after https://github.com/elastic/kibana-operations/issues/96
echo "export FTR_FIPS_MODE=1" >> /etc/profile.d/kibana-fips-env.sh
SHELL
fips.vm.provision "ansible" do |ansible|
ansible.playbook = "fips.yml"