CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Common Module - Telegraf Certificate Fun

Browse Source
This commit is contained in:
Mike Reeves
2018-11-19 15:47:24 -05:00
parent 6796ff5e84
commit 6b79be5b9a
2 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
salt/common/init.sls
View File

@@ -146,6 +146,9 @@ so-telegraf:
- /proc:/host/proc:ro - /proc:/host/proc:ro
- /nsm:/host/nsm:ro - /nsm:/host/nsm:ro
- /etc:/host/etc:ro - /etc:/host/etc:ro
- /etc/pki/ca.crt:/etc/telegraf/ca.crt:ro
- /etc/pki/influxdb.crt:/etc/telegraf/telegraf.crt:ro
- /etc/pki/influxdb.key:/etc/telegraf/telegraf.key:ro
# If its a master or eval lets install the back end for now # If its a master or eval lets install the back end for now
{% if grains['role'] == 'so-master' or grains['role'] == 'so-eval' %} {% if grains['role'] == 'so-master' or grains['role'] == 'so-eval' %}

6
salt/common/telegraf/etc/telegraf.conf
View File

@@ -123,9 +123,9 @@
# udp_payload = "512B" # udp_payload = "512B"
## Optional TLS Config for use on HTTP connections. ## Optional TLS Config for use on HTTP connections.
# tls_ca = "/etc/telegraf/ca.pem" tls_ca = "/etc/telegraf/ca.crt"
# tls_cert = "/etc/telegraf/cert.pem" tls_cert = "/etc/telegraf/telegraf.crt"
# tls_key = "/etc/telegraf/key.pem" tls_key = "/etc/telegraf/telegraf.key"
## Use TLS but skip chain & host verification ## Use TLS but skip chain & host verification
# insecure_skip_verify = false # insecure_skip_verify = false