Kapacitor and InfluxDB should have similar HTTPS Configuration

[desa]

Kapacitor doesn't split out cert and key as separate files

kapacitor/services/httpd/service.go

Lines 128 to 132 in 9ea0764

	if s.https {
	cert, err := tls.LoadX509KeyPair(s.cert, s.cert)
	if err != nil {
	return err
	}

	if s.https {
		cert, err := tls.LoadX509KeyPair(s.cert, s.cert)
		if err != nil {
			return err
		}

Telegraf, InfluxDB, and Chronograf have them as separate https-cert and https-key

InfluxDB:
https://github.com/influxdata/influxdb/blob/e9cbc6da11435fd690561ff82e4a367ebdc62c79/services/httpd/service.go#L93-L97

	if s.https {
		cert, err := tls.LoadX509KeyPair(s.cert, s.key)
		if err != nil {
			return err
		}

Either Kapacitor should switch to using the same convention of the rest of TICK, or TIC should change to Kapacitor's convention.

[desa]

@nathanielc thoughts on this issue?

[nathanielc]

@desa When did this change for InfluxDB? The Kapacitor TLS code was copied verbatim from InfluxDB.

I think having them split makes more sense. Can we split them now and still have backwards compatible config?

[nathanielc]

Looks like we just need to apply this patch to the Kapacitor code. influxdata/influxdb@5d9eae6

[desa]

influxdata/influxdb@5d9eae61b0

[desa]

👍

[AdamSLevy]

This will be very nice to have fixed.