elastic · mtojek · Feb 18, 2020 · Feb 14, 2020 · Feb 14, 2020 · Feb 14, 2020
diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc
@@ -161,6 +161,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
 - Add support for NATS 2.1. {pull}16317[16317]
 - Add Load Balancing metricset to GCP {pull}15559[15559]
 - Add support for Dropwizard metrics 4.1. {pull}16332[16332]
+- Improve the `haproxy` module to support metrics exposed via HTTPS. {issue}14579[14579] {pull}16333[16333]
 
 *Packetbeat*
 

diff --git a/metricbeat/docs/modules/haproxy.asciidoc b/metricbeat/docs/modules/haproxy.asciidoc
@@ -62,6 +62,9 @@ metricbeat.modules:
   enabled: true
 ----
 
+This module supports TLS connections when using `ssl` config field, as described in <<configuration-ssl>>.
+It also supports the options described in <<module-http-config-options>>.
+
 [float]
 === Metricsets
 

diff --git a/metricbeat/module/haproxy/_meta/Dockerfile b/metricbeat/module/haproxy/_meta/Dockerfile
@@ -1,6 +1,11 @@
 ARG HAPROXY_VERSION
 FROM haproxy:${HAPROXY_VERSION}
 RUN apt-get update && apt-get install -y netcat
-HEALTHCHECK --interval=1s --retries=90 CMD nc -z localhost 14567
+
+HEALTHCHECK --interval=1s --retries=90 CMD nc -z localhost 14567 && nc -z localhost 14570
+
 COPY ./haproxy.conf /usr/local/etc/haproxy/haproxy.cfg
-EXPOSE 14567
+COPY ./certs/server.pem  /usr/local/etc/haproxy/server.pem
+COPY ./certs/ca.crt  /usr/local/etc/haproxy/ca.crt
+
+EXPOSE 14567 14568 14569 14570
diff --git a/metricbeat/module/haproxy/_meta/certs/ca.crt b/metricbeat/module/haproxy/_meta/certs/ca.crt
@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----
+MIIFHjCCAwYCCQDyebXXoth88jANBgkqhkiG9w0BAQsFADBRMQswCQYDVQQGEwJV
+UzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEV
+MBMGA1UEAwwMY2FAbG9jYWxob3N0MB4XDTIwMDIxNDE1MzAzOVoXDTMwMDIxMTE1
+MzAzOVowUTELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNV
+BAcMDVNhbiBGcmFuY2lzY28xFTATBgNVBAMMDGNhQGxvY2FsaG9zdDCCAiIwDQYJ
+KoZIhvcNAQEBBQADggIPADCCAgoCggIBAMglbylESpU851HoBkCC/hrG3rlb7bEI
+PiLvEZeVsWYFXjcTPFG8PzZP2N1DjLtuoxgReDLbBhAqo26FRN8UWsOE9YANhfCy
+PXYA1qkK5Mdbv4X5m6FX+pMwGmlzdJjTyK6k0crpUA+fvveffyENMDGrFoEHNFn4
+5Mp0/zafaPD+RCd+y48qUFeBkM1JKkSD6OV4MnZIZi8ttQIzoB5JoL6U6MOE/rpe
+xjUc4OQefTJ9Y3QkhUyAn5TB0VpdEZzgp4VA5NO32uusobWA6a1KyVAtHqfSELG2
+4cPswjWSCXeglMvGbRWCBtyH/9vQ+RyhlBPclTUnBOTHRJSk7DbELCqFRNpASPdK
+oH20a/0MM5gSVVfkdxp+VZC60RxjkGXSMwMF0/RGE7UgrwLIfwwzN1Op7BYqB/RV
+433FBE0o3YRlSky8+t1/p0+mkLIoaOM4HCtmAthJ2L1B3X8+mAvC65nbkpOnoDQ6
++r2FKTqmZOB0KDABrUnW9/Fgf6+vQlgH+cL01f9uhZqyyaoVL5KqhWqiAyZRK0/i
+qMBR8ezZvGrfBE5jTwFs5dIOYKTDGG2UQQjRLV5zSo6n2P9qSEBCO01n+5A1AaZ+
+xxjRFDAEDvs8M4f6X47E/aKSvKbai9GayHKb2U/rDqIy5tEAKPa11xjdVAUi7LBt
+HLkMYHL6a/zlAgMBAAEwDQYJKoZIhvcNAQELBQADggIBAIncpkUN5oWGDCmF912u
+JS9uJYonmcjCwz5j6OTfyiwDk0mV6irEYNhYyRQZGlz56TbfXYxDZbr+AKjb9F9D
+5BiHy+Mjo5DSPMCGREyDEPAL8wB/lMQ64tIt7+CK1ua+05FzSH2DhCsJEX3L+0qb
+bPy5ZDfP7hVrjQvM+BNFcfEXAznBEJ2+zWQ8hiBXwgZXCFclKJsfxRhm8lhSUPE2
+k7DSWwmqVF1/Pvf8dY/QxESrHEdeHuB7QjPcvXPRZ9s01bZQJwFo92UwmkhnWJMg
+nl3imYhypiWWlGPM2qhMmVrCPdipaxvlxTGUXRhDIOW7XvQFkqyG+abZfWthHwWX
+ILURqpBgG4ZQu/S9Insx0XQbw/hKATdSgJ1RvZ7dFsaGG439hujv7Iw6VC7KS+JF
+BN9ecA42eNB6AJiC4wJdSEm5N+cI2+SLNpavaywNEnxWUOYSDFmFdedk6MxZh+SK
+zcY5Zpda1cqTZbZcWb5ewR20p9CrgRqsLYB5fxaOuGKF/mIyChezwYG6g5YvqHOm
+K+gq/MxpVCTIjx+pFT3Y0eTv3+S4+o/R9vS/K8MokGrBqkui78eqJylW8rWWqBBc
+QBSI6y7hEs9KaP84dj5PtO1YCSAbLV/MC0G0/sJVGn8PSdiKTp5uMHpoozgaW6+j
+LuWTqxnwHUNupqZ6DvO8VPHT
+-----END CERTIFICATE-----
diff --git a/metricbeat/module/haproxy/_meta/certs/ca.key b/metricbeat/module/haproxy/_meta/certs/ca.key
@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----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==
+-----END RSA PRIVATE KEY-----
diff --git a/metricbeat/module/haproxy/_meta/certs/ca.pem b/metricbeat/module/haproxy/_meta/certs/ca.pem
@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/metricbeat/module/haproxy/_meta/certs/client.crt b/metricbeat/module/haproxy/_meta/certs/client.crt
@@ -0,0 +1,22 @@
+-----BEGIN CERTIFICATE-----
+MIIDjzCCAXcCAQIwDQYJKoZIhvcNAQEFBQAwUTELMAkGA1UEBhMCVVMxEzARBgNV
+BAgMCkNhbGlmb3JuaWExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xFTATBgNVBAMM
+DGNhQGxvY2FsaG9zdDAeFw0yMDAyMTQxNTMwMzlaFw0zMDAyMTExNTMwMzlaME4x
+CzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRYwFAYDVQQHDA1TYW4g
+RnJhbmNpc2NvMRIwEAYDVQQDDAlsb2NhbGhvc3QwgZ8wDQYJKoZIhvcNAQEBBQAD
+gY0AMIGJAoGBALVn/XhBY8+TeHTqEUis/x4mkIJIbaL2AtDk6jchbcbwJkV/cl6k
+yslxXgF5d2/QWd12QxUbQIyzkv15DagBErtWSJmYtX1VT1b90S+CRO2ZDjb7blnz
+dYBSeojRCpHEfDWfnimCuFfLSSZpDaHm4WYUOk5Z2kUFEgiS04M9ahkjAgMBAAEw
+DQYJKoZIhvcNAQEFBQADggIBAA0sIF9wtEkBR4PPsnBPu07s5mYFdg9ID8XEQ06K
+vnYehdFUMPuQrzFkwWwpJ3saqZ3NY69D1kMgSapYS3ykUuB0/fRJVqm6/XbCbXSh
+4Ufyhoe/G4jJDiI56Evnh12AI68hzlexAS83t8utVQnkqDkNLUYbVdIx1OJ8e88J
+ekc1AyHq09/3sJMRcYnzBlpiaBK3zfwj1V+hlUzFKSqzZvrIouNvHAL7Knu6XOEK
+jE23VLro50lJl33Ew7/SHuMWDTyHOW9YGeeVoZl7ZbJNRtvM84FZ6kSdA+w8Cym5
+DIO3DG4WkKET/VAzPGQD8XwQpvi7bQ2+RCTW32OQTAWvtO/OyYBL1v0s7lFN3rcW
+LfwPd90Ht9KT2tZ93tA1x6FZ2i6zyyH9qTSAc+TrrTJp4YyWg83Yx8dv4dMoWwYH
+D/zdU+TS3UX5aXuJI2VfafxnLsP9XCNeqzFFuomAu6Mq93M9yHbBtBFJkkm+nL/z
+OVUiFjcqYlDcL8Dqi60EgjLewa90+k7eTmEj7Z8i4IwJL9pSXcfCpB5M0ZIZgdsa
+nGITtg4bZJywAYJzKlgrql1oYecNfUAr8ltXXXbBb1C3WBsVBlJghbp3OjFur3RY
+3Y9E81l4lScP2YcPrFEo2tJvetEOPjg78h0WmzrmjPzRCc0CUWvA+/45GL7fon4A
+IDll
+-----END CERTIFICATE-----
diff --git a/metricbeat/module/haproxy/_meta/certs/client.csr b/metricbeat/module/haproxy/_meta/certs/client.csr
@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
diff --git a/metricbeat/module/haproxy/_meta/certs/client.key b/metricbeat/module/haproxy/_meta/certs/client.key
@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/metricbeat/module/haproxy/_meta/certs/client.pem b/metricbeat/module/haproxy/_meta/certs/client.pem
@@ -0,0 +1,22 @@
+-----BEGIN CERTIFICATE-----
+MIIDjzCCAXcCAQIwDQYJKoZIhvcNAQEFBQAwUTELMAkGA1UEBhMCVVMxEzARBgNV
+BAgMCkNhbGlmb3JuaWExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xFTATBgNVBAMM
+DGNhQGxvY2FsaG9zdDAeFw0yMDAyMTQxNTMwMzlaFw0zMDAyMTExNTMwMzlaME4x
+CzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRYwFAYDVQQHDA1TYW4g
+RnJhbmNpc2NvMRIwEAYDVQQDDAlsb2NhbGhvc3QwgZ8wDQYJKoZIhvcNAQEBBQAD
+gY0AMIGJAoGBALVn/XhBY8+TeHTqEUis/x4mkIJIbaL2AtDk6jchbcbwJkV/cl6k
+yslxXgF5d2/QWd12QxUbQIyzkv15DagBErtWSJmYtX1VT1b90S+CRO2ZDjb7blnz
+dYBSeojRCpHEfDWfnimCuFfLSSZpDaHm4WYUOk5Z2kUFEgiS04M9ahkjAgMBAAEw
+DQYJKoZIhvcNAQEFBQADggIBAA0sIF9wtEkBR4PPsnBPu07s5mYFdg9ID8XEQ06K
+vnYehdFUMPuQrzFkwWwpJ3saqZ3NY69D1kMgSapYS3ykUuB0/fRJVqm6/XbCbXSh
+4Ufyhoe/G4jJDiI56Evnh12AI68hzlexAS83t8utVQnkqDkNLUYbVdIx1OJ8e88J
+ekc1AyHq09/3sJMRcYnzBlpiaBK3zfwj1V+hlUzFKSqzZvrIouNvHAL7Knu6XOEK
+jE23VLro50lJl33Ew7/SHuMWDTyHOW9YGeeVoZl7ZbJNRtvM84FZ6kSdA+w8Cym5
+DIO3DG4WkKET/VAzPGQD8XwQpvi7bQ2+RCTW32OQTAWvtO/OyYBL1v0s7lFN3rcW
+LfwPd90Ht9KT2tZ93tA1x6FZ2i6zyyH9qTSAc+TrrTJp4YyWg83Yx8dv4dMoWwYH
+D/zdU+TS3UX5aXuJI2VfafxnLsP9XCNeqzFFuomAu6Mq93M9yHbBtBFJkkm+nL/z
+OVUiFjcqYlDcL8Dqi60EgjLewa90+k7eTmEj7Z8i4IwJL9pSXcfCpB5M0ZIZgdsa
+nGITtg4bZJywAYJzKlgrql1oYecNfUAr8ltXXXbBb1C3WBsVBlJghbp3OjFur3RY
+3Y9E81l4lScP2YcPrFEo2tJvetEOPjg78h0WmzrmjPzRCc0CUWvA+/45GL7fon4A
+IDll
+-----END CERTIFICATE-----
diff --git a/metricbeat/module/haproxy/_meta/certs/generate.sh b/metricbeat/module/haproxy/_meta/certs/generate.sh
@@ -0,0 +1,22 @@
+#!/bin/bash
+
+export CA_SUBJECT='/C=US/ST=California/L=San Francisco/CN=ca@localhost'
+export SERVER_SUBJECT='/C=US/ST=California/L=San Francisco/CN=localhost'
+export CLIENT_SUBJECT='/C=US/ST=California/L=San Francisco/CN=localhost'
+
+# certificate authority creation
+openssl genrsa -out ca.key 4096
+openssl req -new -x509 -days 3650 -key ca.key -out ca.crt -subj "$CA_SUBJECT"
+openssl x509 -in ca.crt -out ca.pem -outform PEM
+
+# server certificate creation
+openssl genrsa -out server.key 1024
+openssl req -new -key server.key -out server.csr -subj "$SERVER_SUBJECT"
+openssl x509 -req -days 3650 -in server.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out server.crt
+cat server.crt server.key > server.pem
+
+# client certificate creation
+openssl genrsa -out client.key 1024
+openssl req -new -key client.key -out client.csr -subj "$CLIENT_SUBJECT"
+openssl x509 -req -days 3650 -in client.csr -CA ca.crt -CAkey ca.key -set_serial 02 -out client.crt
+openssl x509 -in client.crt -out client.pem -outform PEM
diff --git a/metricbeat/module/haproxy/_meta/certs/server.crt b/metricbeat/module/haproxy/_meta/certs/server.crt
@@ -0,0 +1,22 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/metricbeat/module/haproxy/_meta/certs/server.csr b/metricbeat/module/haproxy/_meta/certs/server.csr
@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
diff --git a/metricbeat/module/haproxy/_meta/certs/server.key b/metricbeat/module/haproxy/_meta/certs/server.key
@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/metricbeat/module/haproxy/_meta/certs/server.pem b/metricbeat/module/haproxy/_meta/certs/server.pem
@@ -0,0 +1,37 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/metricbeat/module/haproxy/_meta/fields.yml b/metricbeat/module/haproxy/_meta/fields.yml
@@ -4,6 +4,7 @@
     HAProxy Module
   short_config: false
   release: ga
+  settings: ["ssl", "http"]
   fields:
     - name: haproxy
       type: group

diff --git a/metricbeat/module/haproxy/_meta/haproxy.conf b/metricbeat/module/haproxy/_meta/haproxy.conf
@@ -23,7 +23,7 @@ defaults
   option httplog
   option abortonclose
   option httpclose
-  option forwardfor 
+  option forwardfor
   retries 3
   option redispatch
 
@@ -48,7 +48,15 @@ listen stat-auth
   stats uri /stats
   stats auth admin:admin
 
-listen http-webservices 
+listen stat-https
+
+  bind 0.0.0.0:14570 ssl crt /usr/local/etc/haproxy/server.pem ca-file /usr/local/etc/haproxy/ca.crt verify required
+
+  mode http
+  stats enable
+  stats uri /stats
+
+listen http-webservices
 
   bind 0.0.0.0:8888
   server log1 127.0.0.1:8889 check
diff --git a/metricbeat/module/haproxy/docker-compose.yml b/metricbeat/module/haproxy/docker-compose.yml
@@ -2,12 +2,13 @@ version: '2.3'
 
 services:
   haproxy:
-    image: docker.elastic.co/integrations-ci/beats-haproxy:${HAPROXY_VERSION:-1.8.22}-1
-    build: 
+    image: docker.elastic.co/integrations-ci/beats-haproxy:${HAPROXY_VERSION:-1.8.22}-2
+    build:
       context: ./_meta
       args:
         HAPROXY_VERSION: ${HAPROXY_VERSION:-1.8.22}
     ports:
       - 14567
       - 14568
       - 14569
+      - 14570