Update beats stack monitoring recipe (elastic#7322)

This configures beats in the stack monitoring recipe with `ssl.verification_mode: "certificate"` as elastic/beats#8164 is resolved and removes the associated TODO explaining to do that.
robbavey · Nov 20, 2023 · bba23de · bba23de
1 parent cb514a9
commit bba23de
Showing 1 changed file with 2 additions and 6 deletions.
diff --git a/config/recipes/beats/stack_monitoring.yaml b/config/recipes/beats/stack_monitoring.yaml
@@ -36,9 +36,7 @@ spec:
                     hosts: "https://${data.host}:${data.ports.https}"
                     username: ${MONITORED_ES_USERNAME}
                     password: ${MONITORED_ES_PASSWORD}
-                    # WARNING: disables TLS as the default certificate is not valid for the pod FQDN
-                    # TODO: switch this to "certificate" when available: https://github.com/elastic/beats/issues/8164
-                    ssl.verification_mode: "none"
+                    ssl.verification_mode: "certificate"
                     xpack.enabled: true
               - condition:
                   contains:
@@ -51,9 +49,7 @@ spec:
                     hosts: "https://${data.host}:${data.ports.https}"
                     username: ${MONITORED_ES_USERNAME}
                     password: ${MONITORED_ES_PASSWORD}
-                    # WARNING: disables TLS as the default certificate is not valid for the pod FQDN
-                    # TODO: switch this to "certificate" when available: https://github.com/elastic/beats/issues/8164
-                    ssl.verification_mode: "none"
+                    ssl.verification_mode: "certificate"
                     xpack.enabled: true
     processors:
     - add_cloud_metadata: {}