Skip to content

Commit 22bb13b

Browse files
committed
fix(security): correct exporter config — timeout, field name, CA
- Increase vuls_server timeout from 30s to 5m — 30s is too short for large package sets (786+ packages), causing premature scan failures. - Rename push_interval to scan_interval — matches the actual config field name expected by the exporter binary. - Remove ca_file (Puppet CA) — it replaced the system cert pool instead of appending to it, breaking server cert verification when the Vuls server uses a public CA.
1 parent c324926 commit 22bb13b

1 file changed

Lines changed: 2 additions & 3 deletions

File tree

  • modules/enableit/common/manifests/monitor/exporter

modules/enableit/common/manifests/monitor/exporter/security.pp

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -90,13 +90,12 @@
9090
content => stdlib::to_yaml({
9191
'vuls_server' => {
9292
'url' => $vuls_server_url,
93-
'timeout' => '30s',
93+
'timeout' => '5m',
9494
'cert_file' => "/etc/puppetlabs/puppet/ssl/certs/${host}.pem",
9595
'key_file' => "/etc/puppetlabs/puppet/ssl/private_keys/${host}.pem",
96-
'ca_file' => '/etc/puppetlabs/puppet/ssl/certs/ca.pem',
9796
},
9897
'listen_address' => "${listen_host}:${listen_port}",
99-
'push_interval' => '12h',
98+
'scan_interval' => '12h',
10099
}),
101100
notify => Service["${service_name}.service"],
102101
}

0 commit comments

Comments
 (0)