The issue is that using --insecure
only allow Elastic Agent to communicate with Fleet Server insecurely. It still takes the settings from the policy to communicate with Elasticsearch. You need to modify the output settings inside the Fleet UI in Kibana.
You will want to add the following in the Elasticsearch output configuration (YAML)
block:
ssl.verification_mode: none