Enable FIPS140LicenseBootstrapCheck
This commit ensures that xpack.security.fips_mode.enabled: true
cannot be set in a node that doesn't have the appropriate license.
@@ -310,7 +310,8 @@ public class Security extends Plugin implements ActionPlugin, IngestPlugin, Netw
new TLSLicenseBootstrapCheck(),
new FIPS140SecureSettingsBootstrapCheck(settings, env),
new FIPS140JKSKeystoreBootstrapCheck(settings),
- new FIPS140PasswordHashingAlgorithmBootstrapCheck(settings)));
+ new FIPS140PasswordHashingAlgorithmBootstrapCheck(settings),
+ new FIPS140LicenseBootstrapCheck(XPackSettings.FIPS_MODE_ENABLED.get(settings))));
checks.addAll(InternalRealms.getBootstrapChecks(settings, env));
this.bootstrapChecks = Collections.unmodifiableList(checks);
Automatons.updateMaxDeterminizedStates(settings);
