A digital certificate is a signed credential that binds an identity to a public key. In Fluent Bit, certificates support encrypted network communication and help protect sensitive log data. section 3.6.3
Configure certificate handling according to the trust model:
- Enable tls on the network input; TLS is otherwise off by default. section 3.6.3
- Use tls.verify to control CA-based authenticity checks. Self-signed certificates require verification off; production deployments should use a CA-provided certificate. section 3.6.3
- Plan for certificate lifespans and revocation records during certificate management. section 3.6.3














