SSL intraca

This commit is contained in:
Mike Reeves
2020-08-11 15:37:55 -04:00
parent 5a0aae5fe7
commit f862133323

View File

@@ -200,11 +200,7 @@ so-elasticsearch:
- /opt/so/log/elasticsearch:/var/log/elasticsearch:rw
- /opt/so/conf/ca/cacerts:/etc/pki/ca-trust/extracted/java/cacerts:ro
{%- if FEATURES is sameas true %}
{%- if grains['role'] in ['so-node','so-heavynode'] %}
- /etc/ssl/certs/intca.crt:/usr/share/elasticsearch/config/ca.crt:ro
{%- else %}
- /etc/pki/ca.crt:/usr/share/elasticsearch/config/ca.crt:ro
{%- endif %}
- /etc/pki/elasticsearch.key:/usr/share/elasticsearch/config/elasticsearch.key:ro
- /etc/pki/elasticsearch.crt:/usr/share/elasticsearch/config/elasticsearch.crt:ro
{%- endif %}