support for using TLS only as transport and not client auth (#86)

canonical · Aug 10, 2022 · cb299c6 · cb299c6
1 parent 3446581
commit cb299c6
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 3 deletions.
diff --git a/templates/filebeat-5.yml b/templates/filebeat-5.yml
@@ -78,8 +78,10 @@ output:
     worker: 1
     compression_level: 3
     loadbalance: true
-    {% if logstash_ssl_cert and logstash_ssl_key -%}
+    {% if logstash_ssl_cert -%}
     ssl.certificate_authorities: ["/etc/ssl/certs/filebeat-logstash.crt"]
+    {%- endif %}
+    {% if logstash_ssl_cert and logstash_ssl_key -%}
     ssl.certificate: "/etc/ssl/certs/filebeat-logstash.crt"
     ssl.key: "/etc/ssl/private/filebeat-logstash.key"
     {%- endif %}

diff --git a/templates/filebeat-6.yml b/templates/filebeat-6.yml
@@ -89,8 +89,10 @@ output:
     worker: 1
     compression_level: 3
     loadbalance: true
-    {% if logstash_ssl_cert and logstash_ssl_key -%}
+    {% if logstash_ssl_cert -%}
     ssl.certificate_authorities: ["/etc/ssl/certs/filebeat-logstash.crt"]
+    {%- endif %}
+    {% if logstash_ssl_cert and logstash_ssl_key -%}
     ssl.certificate: "/etc/ssl/certs/filebeat-logstash.crt"
     ssl.key: "/etc/ssl/private/filebeat-logstash.key"
     {%- endif %}

diff --git a/templates/filebeat-7.yml b/templates/filebeat-7.yml
@@ -84,8 +84,10 @@ output:
     worker: 1
     compression_level: 3
     loadbalance: true
-    {% if logstash_ssl_cert and logstash_ssl_key -%}
+    {% if logstash_ssl_cert -%}
     ssl.certificate_authorities: ["/etc/ssl/certs/filebeat-logstash.crt"]
+    {%- endif %}
+    {% if logstash_ssl_cert and logstash_ssl_key -%}
     ssl.certificate: "/etc/ssl/certs/filebeat-logstash.crt"
     ssl.key: "/etc/ssl/private/filebeat-logstash.key"
     {%- endif %}