From 13be0da4846904e7f5e54a768c128c57b318f646 Mon Sep 17 00:00:00 2001
From: Mike Reeves <mike.reeves@securityonionsolutions.com>
Date: Wed, 28 Oct 2020 15:26:41 -0400
Subject: [PATCH] Add a place where custom logstash certs can go

---
 salt/logstash/init.sls | 1 +
 1 file changed, 1 insertion(+)

diff --git a/salt/logstash/init.sls b/salt/logstash/init.sls
index ad11bf567..cec84bbc1 100644
--- a/salt/logstash/init.sls
+++ b/salt/logstash/init.sls
@@ -173,6 +173,7 @@ so-logstash:
       - /sys/fs/cgroup:/sys/fs/cgroup:ro
       - /etc/pki/filebeat.crt:/usr/share/logstash/filebeat.crt:ro
       - /etc/pki/filebeat.p8:/usr/share/logstash/filebeat.key:ro
+      - /opt/so/conf/logstash/etc/certs:/usr/share/logstash/certs:ro
       {% if grains['role'] == 'so-heavynode' %}
       - /etc/ssl/certs/intca.crt:/usr/share/filebeat/ca.crt:ro
       {% else %}