# Cross Cluster Search on ECK - how to set ca cert

**URL:** https://discuss.elastic.co/t/cross-cluster-search-on-eck-how-to-set-ca-cert/202113
**Category:** Elastic Cloud on Kubernetes (ECK)
**Created:** [October 3, 2019, 8:24am UTC](https://discuss.elastic.co/t/cross-cluster-search-on-eck-how-to-set-ca-cert/202113 "2019-10-03T08:24:26Z")
**Posts on this page:** 1
**Showing post:** 6

<div class="post-metadata">

### Author: ![pebrc](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pebrc/32/101790_2.png) [@pebrc](https://discuss.elastic.co/u/pebrc)
#### Post date: [October 18, 2019, 8:24am UTC](https://discuss.elastic.co/t/cross-cluster-search-on-eck-how-to-set-ca-cert/202113/6 "2019-10-18T08:24:13Z")

</div>

Sorry for the late reply.

To configure additional CA certificates you can just use the `xpack.security.transport.ssl.certificate_authorities` key as described in the [Elasticsearch documentation,](https://www.elastic.co/guide/en/elasticsearch/reference/7.4/configuring-tls.html#tls-transport) there is nothing ECK specific here to keep in mind other than mounting the CA certificates into the pod.

An example Elasticsearch manifest for ECK could then look like this:

```auto
apiVersion: elasticsearch.k8s.elastic.co/v1beta1
kind: Elasticsearch
metadata:
  name: cluster-one
spec:
  version: 7.4.0
  nodeSets:
  - name: default
    count: 1
    config:
      xpack.security.transport.ssl.certificate_authorities:
      - /usr/share/elasticsearch/config/remote/ca.crt
    podTemplate:
      spec:
        containers:
        - name: elasticsearch
          volumeMounts:
          - name: remote-certs
            mountPath: /usr/share/elasticsearch/config/remote
        volumes:
        - name: remote-certs
          secret:
            secretName: cluster-two-es-transport-certs-public

```

This assumes that a secret called `cluster-two-es-transport-certs-public` exists containing the CA certs of the other cluster you want to connect to. You will also have to configure the CA of this cluster on the other side to establish mutual trust.

---

_[View the full topic](https://discuss.elastic.co/t/cross-cluster-search-on-eck-how-to-set-ca-cert/202113)._