SSO Startup Fails Starting With 1.18.0-bb.3
After merging 1.18.0-bb.3, I noticed SSO config breaks elastic from starting.
{"@timestamp":"2024-09-25T17:20:41.721Z", "log.level":"ERROR", "message":"fatal exception while booting Elasticsearch", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.bootstrap.Elasticsearch","elasticsearch.node.name":"logging-ek-es-master-0","elasticsearch.cluster.name":"logging-ek","error.type":"java.lang.IllegalStateException","error.message":"security initialization failed","error.stack_trace":"java.lang.IllegalStateException: security initialization failed\n\tat org.elasticsearch.security@8.14.3/org.elasticsearch.xpack.security.Security.createComponents(Security.java:687)\n\tat org.elasticsearch.server@8.14.3/org.elasticsearch.node.NodeConstruction.lambda$construct$13(NodeConstruction.java:816)\n\tat org.elasticsearch.server@8.14.3/org.elasticsearch.plugins.PluginsService.lambda$flatMap$1(PluginsService.java:253)\n\tat java.base/java.util.stream.ReferencePipeline$7$1.accept(ReferencePipeline.java:288)\n\tat java.base/java.util.stream.ReferencePipeline$3$1.accept(ReferencePipeline.java:212)\n\tat java.base/java.util.AbstractList$RandomAccessSpliterator.forEachRemaining(AbstractList.java:722)\n\tat java.base/java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:556)\n\tat java.base/java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:546)\n\tat java.base/java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:622)\n\tat java.base/java.util.stream.AbstractPipeline.evaluateToArrayNode(AbstractPipeline.java:291)\n\tat java.base/java.util.stream.ReferencePipeline.toArray(ReferencePipeline.java:631)\n\tat java.base/java.util.stream.ReferencePipeline.toArray(ReferencePipeline.java:637)\n\tat java.base/java.util.stream.ReferencePipeline.toList(ReferencePipeline.java:642)\n\tat org.elasticsearch.server@8.14.3/org.elasticsearch.node.NodeConstruction.construct(NodeConstruction.java:816)\n\tat org.elasticsearch.server@8.14.3/org.elasticsearch.node.NodeConstruction.prepareConstruction(NodeConstruction.java:266)\n\tat org.elasticsearch.server@8.14.3/org.elasticsearch.node.Node.<init>(Node.java:192)\n\tat org.elasticsearch.server@8.14.3/org.elasticsearch.bootstrap.Elasticsearch$2.<init>(Elasticsearch.java:240)\n\tat org.elasticsearch.server@8.14.3/org.elasticsearch.bootstrap.Elasticsearch.initPhase3(Elasticsearch.java:240)\n\tat org.elasticsearch.server@8.14.3/org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:75)\nCaused by: java.lang.IllegalStateException: OpenID Connect Realm requires that the token service be enabled (xpack.security.authc.token.enabled)\n\tat org.elasticsearch.security@8.14.3/org.elasticsearch.xpack.security.authc.oidc.OpenIdConnectRealm.<init>(OpenIdConnectRealm.java:109)\n\tat org.elasticsearch.security@8.14.3/org.elasticsearch.xpack.security.authc.InternalRealms.lambda$getFactories$7(InternalRealms.java:164)\n\tat org.elasticsearch.security@8.14.3/org.elasticsearch.xpack.security.authc.Realms.initRealms(Realms.java:303)\n\tat org.elasticsearch.security@8.14.3/org.elasticsearch.xpack.security.authc.Realms.<init>(Realms.java:112)\n\tat org.elasticsearch.security@8.14.3/org.elasticsearch.xpack.security.Security.createComponents(Security.java:805)\n\tat org.elasticsearch.security@8.14.3/org.elasticsearch.xpack.security.Security.createComponents(Security.java:673)\n\t... 18 more\n"} ERROR: Elasticsearch did not exit normally - check the logs at /usr/share/elasticsearch/logs/logging-ek.log
To test, use basic sso settings per dev-sso-values.yaml and (optional) pass in test-values.yaml