Tweak elastic agent ssl gen

salt/ca/files/signing_policies.conf

@@ -57,7 +57,7 @@ x509_signing_policies:
     - extendedKeyUsage: serverAuth
     - days_valid: 820
     - copypath: /etc/pki/issued_certs/
-  fleet:
+  elasticfleet:
     - minions: '*'
     - signing_private_key: /etc/pki/ca.key
     - signing_cert: /etc/pki/ca.crt
@@ -65,9 +65,8 @@ x509_signing_policies:
     - ST: Utah
     - L: Salt Lake City
     - basicConstraints: "critical CA:false"
-    - keyUsage: "critical keyEncipherment"
+    - keyUsage: "digitalSignature, nonRepudiation"
     - subjectKeyIdentifier: hash
     - authorityKeyIdentifier: keyid,issuer:always
-    - extendedKeyUsage: serverAuth
     - days_valid: 820
     - copypath: /etc/pki/issued_certs/

salt/ssl/init.sls

@@ -176,7 +176,7 @@ etc_elasticfleet_crt:
   x509.certificate_managed:
     - name: /etc/pki/elasticfleet.crt
     - ca_server: {{ ca_server }}
-    - signing_policy: fleet
+    - signing_policy: elasticfleet
     - public_key: /etc/pki/elasticfleet.key
     - CN: {{ GLOBALS.hostname }}
     - subjectAltName: DNS:{{ GLOBALS.hostname }}, IP:{{ GLOBALS.node_ip }}
@@ -214,7 +214,7 @@ chownilogstashelasticfleetp8:
     - group: 939
 
 # Create Symlinks to the keys so I can distribute it to all the things
-elasticfleetdir:
+elasticfleetdircerts:
   file.directory:
     - name: /opt/so/saltstack/local/salt/elastic-fleet/files/certs
     - makedirs: True