From 44fcd999fdf9e8579c717e5d6d1000004ae8d204 Mon Sep 17 00:00:00 2001 From: Mike Reeves Date: Tue, 18 Aug 2020 15:08:24 -0400 Subject: [PATCH] Address #1205 --- salt/ssl/init.sls | 19 +++++++++++++++++-- 1 file changed, 17 insertions(+), 2 deletions(-) diff --git a/salt/ssl/init.sls b/salt/ssl/init.sls index b7b347ec5..82512068c 100644 --- a/salt/ssl/init.sls +++ b/salt/ssl/init.sls @@ -254,6 +254,13 @@ ealstickeyperms: - name: /etc/pki/elasticsearch.key - mode: 640 - group: 930 + +elasticp12perms: + file.managed: + - replace: False + - name: /etc/pki/elasticsearch.p12 + - mode: 640 + - group: 930 # Create a cert for Redis encryption /etc/pki/redis.key: @@ -530,11 +537,19 @@ fleetkeyperms: - onchanges: - x509: /etc/pki/elasticsearch.key -miniokeyperms: +elasticp12perms: + file.managed: + - replace: False + - name: /etc/pki/elasticsearch.p12 + - mode: 640 + - group: 930 + +elastickeyperms: file.managed: - replace: False - name: /etc/pki/elasticsearch.key - mode: 640 - group: 930 + {%- endif %} -{%- endif %} \ No newline at end of file +{%- endif %}