Comment 0 for bug 2009890

If filebeat is related to vault via certificates relation:

vault:certificates filebeat:certificates

filebeat remove the execution right to other of /etc/ssl/certs breaking any service running python requests and relying on /etc/ssll/certs/ca-certificates i.e. openstack services which throw error:

2023-03-09 15:35:15.534 3702484 ERROR nova OSError: Could not find a suitable TLS CA certificate bundle, invalid path: /etc/ssl/certs/ca-certificates.crt

Workaround is

chmod o+x /etc/ssl/certs