From ab8a631381f4e8ea15779b988bd32ac3a0a70850 Mon Sep 17 00:00:00 2001
From: AkshayDubey29 <akshaydubey2912@gmail.com>
Date: Tue, 17 Jul 2018 16:10:04 +0530
Subject: [PATCH 1/4] Update Dockerfile

---
 universalforwarder/Dockerfile | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/universalforwarder/Dockerfile b/universalforwarder/Dockerfile
index a0fd4fe..1791b42 100644
--- a/universalforwarder/Dockerfile
+++ b/universalforwarder/Dockerfile
@@ -9,6 +9,8 @@ ENV SPLUNK_HOME /opt/splunk
 ENV SPLUNK_GROUP splunk
 ENV SPLUNK_USER splunk
 ENV SPLUNK_BACKUP_DEFAULT_ETC /var/opt/splunk
+ENV SPLUNK_CERT_PATH /opt/splunk/etc/auth/self_signed
+
 ARG DEBIAN_FRONTEND=noninteractive
 
 # add splunk:splunk user
@@ -38,12 +40,15 @@ RUN apt-get update && apt-get install -y wget sudo \
     && mkdir -p /var/opt/splunk \
     && cp -R ${SPLUNK_HOME}/etc ${SPLUNK_BACKUP_DEFAULT_ETC} \
     && rm -fR ${SPLUNK_HOME}/etc \
+    && mkdir -p ${SPLUNK_CERT_PATH} \
     && chown -R ${SPLUNK_USER}:${SPLUNK_GROUP} ${SPLUNK_HOME} \
     && chown -R ${SPLUNK_USER}:${SPLUNK_GROUP} ${SPLUNK_BACKUP_DEFAULT_ETC} \
     && rm -rf /var/lib/apt/lists/*
 
 COPY entrypoint.sh /sbin/entrypoint.sh
 RUN chmod +x /sbin/entrypoint.sh
+COPY myCACertificate.pem /opt/splunk/etc/auth/self_signed/
+COPY myMainServerCertificate.pem /opt/splunk/etc/auth/self_signed/
 
 # Ports Splunk Daemon, Network Input, HTTP Event Collector
 EXPOSE 8089/tcp 1514 8088/tcp

From 32d1fad6e7106cc481a08c4b75b4be7ab8f936eb Mon Sep 17 00:00:00 2001
From: AkshayDubey29 <akshaydubey2912@gmail.com>
Date: Tue, 17 Jul 2018 16:10:42 +0530
Subject: [PATCH 2/4] Create myMainServerCertificate.pem

---
 universalforwarder/myMainServerCertificate.pem | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 universalforwarder/myMainServerCertificate.pem

diff --git a/universalforwarder/myMainServerCertificate.pem b/universalforwarder/myMainServerCertificate.pem
new file mode 100644
index 0000000..bc98b67
--- /dev/null
+++ b/universalforwarder/myMainServerCertificate.pem
@@ -0,0 +1 @@
+#Client Certificate

From 25a4528bb002fbd0913a49dc08c61d4e1140f062 Mon Sep 17 00:00:00 2001
From: AkshayDubey29 <akshaydubey2912@gmail.com>
Date: Tue, 17 Jul 2018 16:11:02 +0530
Subject: [PATCH 3/4] Create myCACertificate.pem

---
 universalforwarder/myCACertificate.pem | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 universalforwarder/myCACertificate.pem

diff --git a/universalforwarder/myCACertificate.pem b/universalforwarder/myCACertificate.pem
new file mode 100644
index 0000000..ab6c57f
--- /dev/null
+++ b/universalforwarder/myCACertificate.pem
@@ -0,0 +1 @@
+#Root CA Cert

From 807d8b4a48c8e5390d506adad6a79637e22b543f Mon Sep 17 00:00:00 2001
From: AkshayDubey29 <akshaydubey2912@gmail.com>
Date: Tue, 17 Jul 2018 21:24:19 +0530
Subject: [PATCH 4/4] Update entrypoint.sh

---
 universalforwarder/entrypoint.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/universalforwarder/entrypoint.sh b/universalforwarder/entrypoint.sh
index f790a0d..cc5a26d 100644
--- a/universalforwarder/entrypoint.sh
+++ b/universalforwarder/entrypoint.sh
@@ -82,6 +82,9 @@ EOF
 
     # Setup deployment server
     # http://docs.splunk.com/Documentation/Splunk/latest/Updating/Configuredeploymentclients
+    if [[ -n ${SPLUNK_META} ]]; then
+      sudo -HEu ${SPLUNK_USER} echo ${SPLUNK_META} >> /opt/splunk/etc/system/local/inputs.conf 
+    fi
     if [[ -n ${SPLUNK_DEPLOYMENT_SERVER} ]]; then
       sudo -HEu ${SPLUNK_USER} sh -c "${SPLUNK_HOME}/bin/splunk set deploy-poll ${SPLUNK_DEPLOYMENT_SERVER} -auth admin:changeme"
       __restart_required=true