CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-07 17:52:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix filebeat certs

Browse Source
This commit is contained in:
Mike Reeves
2020-08-19 19:51:57 -04:00
committed by GitHub
parent 8312221c82
commit 5f41d9fc25
1 changed files with 11 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
salt/ssl/init.sls
View File

@@ -37,6 +37,16 @@ m2cryptopkgs:
- python-m2crypto
{% endif %}
removefbcertdir:
file.absent:
- name: /etc/pki/filebeat.crt
- onlyif: "[ -d /etc/pki/filebeat.crt ]"
removefbp8dir:
file.absent:
- name: /etc/pki/filebeat.p8
- onlyif: "[ -d /etc/pki/filebeat.p8 ]"
/etc/pki/influxdb.key:
x509.private_key_managed:
- CN: {{ manager }}
@@ -371,17 +381,6 @@ fleetkeyperms:
{% endif %}
{% if grains['role'] in ['so-sensor', 'so-manager', 'so-node', 'so-searchnode', 'so-eval', 'so-helix', 'so-managersearch', 'so-heavynode', 'so-fleet', 'so-standalone', 'so-import'] %}
removefbcertdir:
file.absent:
- name: /etc/pki/filebeat.crt
- onlyif: "[ -d /etc/pki/filebeat.crt ]"
removefbp8dir:
file.absent:
- name: /etc/pki/filebeat.p8
- onlyif: "[ -d /etc/pki/filebeat.p8 ]"
fbcertdir:
file.directory:
- name: /opt/so/conf/filebeat/etc/pki