Skip to content

[BUG] GCS snapshot repository plugin doesn't work after FIPS mode is activated #20405

@zagr0

Description

@zagr0

Describe the bug

After we upgraded to v3.4.0 we faced that snapshots are broken with GCS repository plugin:

response: '{"error":{"root_cause":[{"type":"repository_exception","reason":"[name-opensearch-dev] could not read repository data from index blob"}],"type":"repository_exception","reason":"[name-opensearch-dev] could not read repository data from index blob","caused_by":{"type":"i_o_exception","reason":"java.lang.IllegalStateException: FIPS mode is active but no custom truststore is configured. Please configure gcs.client.<client-name>.truststore.path and gcs.client.<client-name>.truststore.secure_password settings.","caused_by":{"type":"illegal_state_exception","reason":"FIPS mode is active but no custom truststore is configured. Please configure gcs.client.<client-name>.truststore.path and gcs.client.<client-name>.truststore.secure_password settings."}}},"status":500}',

Related component

Storage:Snapshots

To Reproduce

  1. Have GCS repository configured in opensearch
apiVersion: opensearch.opster.io/v1
kind: OpenSearchCluster
metadata:
  name: name
spec:
  general:
    serviceName: logs
    version: 3.4.0
    pluginsList:
      - repository-gcs
    keystore:
      - secret:
          name: gcs-sa-secret
        keyMappings:
          key.json: gcs.client.default.credentials_file
    snapshotRepositories:
      - name: name-opensearch-dev
        type: gcs
        settings:
          bucket: name-opensearch-dev
...

Expected behavior

We expect snapshots working

Additional Details

Plugins
repository-gcs

Additional context
Opensearch cluster is managed with opensearch-operator v2.8.0

Metadata

Metadata

Assignees

No one assigned

    Labels

    Storage:SnapshotsbugSomething isn't workingv3.7.0Issues and PRs related to version 3.7.0

    Type

    No type
    No fields configured for issues without a type.

    Projects

    Status

    ✅ Done

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions