Skip to content

Doc: Update security docs to replace obsolete cacert setting#16798

Merged
karenzone merged 2 commits intomainfrom
karenzone-dep-cacert
Dec 16, 2024
Merged

Doc: Update security docs to replace obsolete cacert setting#16798
karenzone merged 2 commits intomainfrom
karenzone-dep-cacert

Conversation

@karenzone
Copy link
Contributor

@karenzone karenzone commented Dec 13, 2024

Related:

The "Secure your connection to Elasticsearch > Configure the elasticsearch output" topic contains inaccurate info (and link) in light of obsolete SSL setttings.

This PR updates the content to point to replacement setting and fixes the example.

PREVIEW: https://logstash_bk_16798.docs-preview.app.elstc.co/guide/en/logstash/master/ls-security.html#es-sec-plugin

@karenzone
Copy link
Contributor Author

This PR must be approved/merged before we can merge logstash-plugins/logstash-output-elasticsearch#1197.

@github-actions
Copy link
Contributor

@karenzone karenzone marked this pull request as ready for review December 13, 2024 21:16
@karenzone
Copy link
Contributor Author

@donoghuc, this doc change is a prereq for logstash-plugins/logstash-output-elasticsearch#1197. Will you take a look and make sure that I didn't miss anything, please?

Copy link
Member

@donoghuc donoghuc left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good catch! as part of #16652 i'm searching the LS repo for any mentions of deprecated ssl related values. I'll let you know if i find more in the docs.

I'm not sure style wise if we prefer to have it explicitly as a list

ssl_certificate_authorities => ['/etc/logstash/config/certs/ca.crt']

But it certainly appears to work fine as just a single value. Here is the spec https://github.com/logstash-plugins/logstash-output-elasticsearch/blob/6a32bbe2ac02ee9491bc734b1cf4aa816c161237/lib/logstash/plugin_mixins/elasticsearch/api_configs.rb#L71

Co-authored-by: Cas Donoghue <cas.donoghue@gmail.com>
@github-actions
Copy link
Contributor

@karenzone karenzone merged commit e1f4e77 into main Dec 16, 2024
@karenzone karenzone deleted the karenzone-dep-cacert branch December 16, 2024 20:25
@karenzone
Copy link
Contributor Author

18765

@karenzone
Copy link
Contributor Author

@logstashmachine backport 8.x

@karenzone
Copy link
Contributor Author

@logstashmachine backport 8.17

@karenzone
Copy link
Contributor Author

@logstashmachine backport 8.16

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment