Logstash Module - SSL updates

salt/logstash/conf/conf.enabled.txt.so-master

@@ -12,6 +12,6 @@
 /usr/share/logstash/pipeline.so/0002_input_windows_json.conf
 /usr/share/logstash/pipeline.so/0003_input_syslog.conf
 /usr/share/logstash/pipeline.so/0005_input_suricata.conf
-/usr/share/logstash/pipeline.so/0006_input_beats.conf
+/usr/share/logstash/pipeline.dynamic/0006_input_beats.conf
 /usr/share/logstash/pipeline.so/0007_input_import.conf
 /usr/share/logstash/pipeline.dynamic/9999_output_redis.conf

salt/logstash/files/dynamic/0006_input_beats.conf

@@ -7,8 +7,9 @@ input {
   beats {
     port => "5044"
     ssl => true
-    ssl_certificate => ""
-    ssl_key => "/some/location"
+    ssl_certificate_authorities => ["/usr/share/filebeat/ca.crt"]
+    ssl_certificate => "/usr/share/logstash/filebeat.crt"
+    ssl_key => "/usr/share/logstash/filebeat.key"
     tags => [ "beat" ]
   }
 }

salt/logstash/init.sls

@@ -135,4 +135,5 @@ so-logstash:
       - /sys/fs/cgroup:/sys/fs/cgroup:ro
       - /etc/pki/filebeat.crt:/usr/share/logstash/filebeat.crt:ro
       - /etc/pki/filebeat.key:/usr/share/logstash/filebeat.key:ro
+      - /etc/pki/ca.crt:/usr/share/filebeat/ca.crt:ro
     - network_mode: so-elastic-net