Browse Source

Limit JDK versions for FIPS 140-2 matrix jobs (#74564)

We _only_ support Oracle JDK11 for FIPS 140-2 mode so there is no
need to run tests in FIPS 140-2 mode with all JDKs we otherwise
support. This change limits the versions for our matrix fips jobs
to JDK11 and openjdk16 which is the current bundled JDK. We want to
use the latter as a canary for changes that might break the
FIPS 140-2 mode, that might get introduced in JDK16 and later
backported to JDK11.
Ioannis Kakavas 4 years ago
parent
commit
c256039bd0

+ 1 - 1
.ci/jobs.t/elastic+elasticsearch+periodic+java-fips-matrix.yml

@@ -4,6 +4,6 @@ vars:
   - job-name: elastic+elasticsearch+%BRANCH%+periodic+java-fips-matrix
   - job-display-name: "elastic / elasticsearch # %BRANCH% - java fips compatibility matrix"
   - job-description: "Testing of the Elasticsearch %BRANCH% branch java FIPS compatibility matrix.\n"
-  - matrix-yaml-file: ".ci/matrix-runtime-javas.yml"
+  - matrix-yaml-file: ".ci/matrix-runtime-javas-fips.yml"
   - matrix-variable: ES_RUNTIME_JAVA
   - gradle-args: "-Dbwc.checkout.align=true -Dtests.fips.enabled=true check"

+ 12 - 0
.ci/matrix-runtime-javas-fips.yml

@@ -0,0 +1,12 @@
+# This file is used as part of a matrix build in Jenkins where the
+# values below are included as an axis of the matrix.
+
+# java11 should always be included as we only support Oracle Java 11 in
+# FIPS 140-2 mode. 
+# We also want to test with the bundled JDK so that we proactively find
+# issues that might later be backported to JDK11. Current bundled JDK is
+# openjdk16
+
+ES_RUNTIME_JAVA:
+  - java11
+  - openjdk16