Check for -Dorg.bouncycastle.fips.approved_only in testclusters to run with FIPS enforcement (opensearch-project#20685)

* Also check for -Dorg.bouncycastle.fips.approved_only in testclusters to enforce running with FIPS enforcement

Signed-off-by: Craig Perkins <craig5008@gmail.com>
Co-authored-by: Andriy Redko <andriy.redko@aiven.io>

Author: cwperks

buildSrc/src/main/java/org/opensearch/gradle/info/FipsBuildParams.java

@@ -36,6 +36,10 @@ public static boolean isInFipsMode() {
         return DEFAULT_FIPS_MODE.equals(fipsMode);
     }
 
+    public static boolean isInFipsApprovedOnlyMode() {
+        return isInFipsMode() && "true".equals(System.getProperty("org.bouncycastle.fips.approved_only"));
+    }
+
     public static String getFipsMode() {
         return fipsMode;
     }

buildSrc/src/main/java/org/opensearch/gradle/testclusters/OpenSearchNode.java

@@ -549,7 +549,7 @@ public synchronized void start() {
             logToProcessStdout("installed plugins");
         }
 
-        if (FipsBuildParams.isInFipsMode() && keystorePassword.isEmpty()) {
+        if (FipsBuildParams.isInFipsApprovedOnlyMode() && keystorePassword.isEmpty()) {
             throw new TestClustersException("Can not start " + this + " in FIPS JVM, missing keystore password");
         }