Cannot read existing Message Signing Key pair for all integrations and fleet actions

Elastic Stack Kibana
1

Hi,

I have deployed Elasticsearch and Kibana on a aws eks cluster by mostly following the quickstart guide for elastic cloud on kubernetes. I was able to get both elasticsearch and kibana running but know I want to setup integrations with AWS. No matter which instructions I follow I can't seem to get past the error "Cannot read existing Message Signing Key pair". I have tried creating Fleet server and agent with the same error. Any help as to why I am getting this error and how to resolve it would be great.
Thanks in advance.

2

Hello and welcome,

Where are you receiving that message? it is not clear from where is this message.

You need to share the entire error.

3

Hi,

Thanks for the quick reply. It shows up in Kibana on any of the integrations when clicking add integration, clicking save and continue, and on the Fleet page when trying to add a Fleet server or agent.

The entire message is: Configuration error

Cannot read existing Message Signing Key pair
That's it.
Thanks.

4

Please share a screenshot of the error.

5

Sure, here you go. I get the same error when trying to add a fleet manager or agent.

Screenshot 2024-05-24 at 2.03.26 PM
Screenshot 2024-05-24 at 2.03.26 PM1669×810 59.7 KB

6

Yeah, I do not use ECK, but this github issue has more explanation about this error and a workaround to fix it: Saving Agent Policy fails with "Cannot read existing Message Signing Key pair" · Issue #176528 · elastic/kibana · GitHub

It seems related to having another kibana instance in eck change the signing key I guess.

7

Hi @leandrojmp ,

Thanks for the link. After some trial and error I was able to get the old keys deleted and new keys generated. After that I was able to setup the aws integration successfully. I do have one last questions. Is the elastic agent and Fleet server required for the integrations to work? With everything I am reading it is not 100% clear. Also when trying to setup the Fleet server I can't seem to get passed the "Install to a centralized host". I am running this on an EKS setup and all the official documentation mentions either elastic cloud or on prem. If you could point me in the right direction or have any insights that would be great. If I don't need a Fleet Server or Agent even better.

Thanks in advance.