From bba23de8c39f6c44467b644ef5ef1ed8bf7c6b5c Mon Sep 17 00:00:00 2001 From: Thibault Richard Date: Mon, 20 Nov 2023 15:57:24 +0100 Subject: [PATCH] Update beats stack monitoring recipe (#7322) This configures beats in the stack monitoring recipe with `ssl.verification_mode: "certificate"` as elastic/beats#8164 is resolved and removes the associated TODO explaining to do that. --- config/recipes/beats/stack_monitoring.yaml | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/config/recipes/beats/stack_monitoring.yaml b/config/recipes/beats/stack_monitoring.yaml index 915ba1f682..d406c4157c 100644 --- a/config/recipes/beats/stack_monitoring.yaml +++ b/config/recipes/beats/stack_monitoring.yaml @@ -36,9 +36,7 @@ spec: hosts: "https://${data.host}:${data.ports.https}" username: ${MONITORED_ES_USERNAME} password: ${MONITORED_ES_PASSWORD} - # WARNING: disables TLS as the default certificate is not valid for the pod FQDN - # TODO: switch this to "certificate" when available: https://github.com/elastic/beats/issues/8164 - ssl.verification_mode: "none" + ssl.verification_mode: "certificate" xpack.enabled: true - condition: contains: @@ -51,9 +49,7 @@ spec: hosts: "https://${data.host}:${data.ports.https}" username: ${MONITORED_ES_USERNAME} password: ${MONITORED_ES_PASSWORD} - # WARNING: disables TLS as the default certificate is not valid for the pod FQDN - # TODO: switch this to "certificate" when available: https://github.com/elastic/beats/issues/8164 - ssl.verification_mode: "none" + ssl.verification_mode: "certificate" xpack.enabled: true processors: - add_cloud_metadata: {}