[Fips] Explicitly set trustStoreType to BCFKS in FIPS docker image #129385
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
We see an certificate issue when using fips docker image creating searchable snapshots in aws and gcs. This is likely related to a configuration issue not explicitly setting the trust store type for our bcfks cacerts
breskeby
added
>non-issue
:Delivery/Build
breskeby
added
the
:Delivery/Packaging
Collaborator
|
Pinging @elastic/es-delivery (Team:Delivery) |
Contributor
Author
|
Verified this manually together with @gersonsosa |
breskeby
added a commit
to breskeby/elasticsearch
that referenced
this pull request
Jun 13, 2025
…lastic#129385) We see an certificate issue when using fips docker image creating searchable snapshots in aws and gcs. This is likely related to a configuration issue not explicitly setting the trust store type for our bcfks cacerts
Collaborator
💚 Backport successful
|
donoghuc
added a commit
to elastic/logstash
that referenced
this pull request
Aug 18, 2025
With ES 9.2.0 the inference service crashes when trying to use BCFKS KeyStore not available. It looks related to elastic/elasticsearch#129385 this commit turns off the inference service as its not needed in tests.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
We see an certificate issue when using fips docker image creating searchable snapshots in aws
and gcs. This is likely related to a configuration issue not explicitly setting the trust store
type for our bcfks cacerts