Skip to content

Conversation

@Tangresh
Copy link

@Tangresh Tangresh commented Sep 2, 2016

What does this PR fix?

If a certificate_authorities is configured by setting ssl_cert_path but no certificate file exists at salt://filebeat/files/ca.pem, the file.managed state in filebeat.config fails.

Solution

This PR brings the possibility to disable the management of a logstash certificate authority file by setting ssl_cert to None:

filebeat:
  logstash:
    tls:
      ssl_cert:

This is not the nicest solution to the problem, but it does not break existing configurations.

Additional Contents

This PR also adds the ability to disable using custom certificate_authorities, which is also attempted with #11, which seems to be dormant. To disable custom certificate_authorities, set ssl_cert_path to None:

filebeat:
  logstash:
    tls:
      ssl_cert_path:

@gravyboat
Copy link

Good stuff, thanks.

@gravyboat gravyboat merged commit d1a7d05 into saltstack-formulas:master Sep 2, 2016
@Tangresh Tangresh deleted the tls-cleanup branch September 12, 2016 10:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants