6d
NAME READY UP-TO-DATE AVAILABLE AGE
deployment.apps/fleet-server-agent 1/1 1 1 6d22h
deployment.apps/kibana-kb 1/1 1 1 6d22h
NAME DESIRED CURRENT READY AGE
replicaset.apps/fleet-server-agent-5dbd7b7f8d 0 0 0 6d22h
replicaset.apps/fleet-server-agent-65f89468dc 1 1 1 8h
replicaset.apps/fleet-server-agent-75fcbb8c4c 0 0 0 3d23h
replicaset.apps/fleet-server-agent-86849cc5ff 0 0 0 22h
replicaset.apps/kibana-kb-5496499b58 1 1 1 36m
replicaset.apps/kibana-kb-5977cb9678 0 0 0 9h
replicaset.apps/kibana-kb-5f9dbb76b 0 0 0 6d21h
replicaset.apps/kibana-kb-778986d7dd 0 0 0 3d23h
replicaset.apps/kibana-kb-966f4cc79 0 0 0 6d22h
replicaset.apps/kibana-kb-c5b96c647 0 0 0 9h
replicaset.apps/kibana-kb-f778fb866 0 0 0 7h30m
NAME READY AGE
statefulset.apps/elastic-operator 1/1 16d
statefulset.apps/elasticsearch-es-default 3/3 6d22h
```
```auto
apiVersion: kibana.k8s.elastic.co/v1ts/eck$
kind: Kibana
metadata:
name: kibana
namespace: elastic-system
spec:
version: 8.14.2
count: 1
elasticsearchRef:
name: elasticsearch
http:
service:
spec:
type: LoadBalancer
config:
xpack.fleet.agents.elasticsearch.hosts: ["https://192.168.0.178:9200"]
xpack.fleet.agents.fleet_server.hosts: ["https://192.168.0.177:8220"]
xpack.fleet.packages:
- name: system
version: latest
- name: elastic_agent
version: latest
- name: fleet_server
version: latest
- name: kubernetes
version: latest
xpack.fleet.agentPolicies:
- name: Fleet Server on ECK policy
id: eck-fleet-server
# namespace: elastic-system
monitoring_enabled:
- logs
- metrics
unenroll_timeout: 900
package_policies:
- name: fleet_server-1
id: fleet_server-1
package:
name: fleet_server
- name: Elastic Agent on ECK policy
id: eck-agent
# namespace: elastic-system
monitoring_enabled:
- logs
- metrics
unenroll_timeout: 900
package_policies:
- name: system-1
id: system-1
package:
name: system
```
---
### Author:  [@Julia\_Bardi](https://discuss.elastic.co/u/Julia_Bardi)
#### Post date: [July 9, 2024, 7:30am UTC](https://discuss.elastic.co/t/eck-adding-external-agent-ssl-help/362759/2 "2024-07-09T07:30:40Z")
Hi, where is the value of the `fleet-server-es-ca-trusted-fingerprint` come from?
What happens if you run the command without it?
There is a similar post which might help: [Fleet server and agents unable to write data to Elasticsearch - Bad Certificate - #3](https://discuss.elastic.co/t/fleet-server-and-agents-unable-to-write-data-to-elasticsearch-bad-certificate/321675/3)
---
### Author:  [@clockard](https://discuss.elastic.co/u/clockard)
#### Post date: [July 9, 2024, 5:03pm UTC](https://discuss.elastic.co/t/eck-adding-external-agent-ssl-help/362759/3 "2024-07-09T17:03:29Z")
Thank you for taking the time Julia\_Bardi
I tried a bunch of these secrets to get into work particularly, I have placed a \* At the front that I have tried.
As for trying without the switch fleet-server-es-ca-trusted-fingerprint I get the same result.
As for adding that custom yaml, I am in this situation that is explained in this post. I don't know how to add that in the kibana.yaml file.
I found [Fleet settings in Kibana | Kibana Guide [8.14] | Elastic](https://www.elastic.co/guide/en/kibana/current/fleet-settings-kb.html) But I'm not seeing anything to help with this situation and again I appreciate it anyone's help i'm a doofus
> [@Want to set ssl.verification\_mode as none for default fleet output in kibana.yml](https://discuss.elastic.co/t/want-to-set-ssl-verification-mode-as-none-for-default-fleet-output-in-kibana-yml/315098):
>
> HI I am trying to send data from fleet managed Elastic agent to elastic master node with self-signed certificate. The auto generated self signed certificate doesnot have the publicip of the node. So to send data i want to set ssl.verification\_mode as none for default fleet output in kibana.yml. I have modified the xpack default output and added config: "ssl.verification\_mode": none as shown below. xpack.fleet.outputs: [{id: fleet-default-output, name: default, is\_default: true, is\_default\_moni…
```auto
NAME TYPE DATA AGE
elastic-agent-agent-config Opaque 1 6d11h
elastic-agent-agent-envvars Opaque 1 6d11h
elastic-agent-agent-fleetserver-ca Opaque 2 7d9h
elastic-agent-agent-kb-user Opaque 1 7d9h
elastic-agent-agent-kibana-ca Opaque 2 7d9h
elastic-system-elastic-agent-agent-kb-user Opaque 3 7d9h
elastic-system-fleet-server-agent-kb-user Opaque 3 7d9h
elastic-system-fleet-server-elastic-system-elasticsearch-agent-user Opaque 2 7d9h
elastic-system-kibana-kibana-user Opaque 2 7d9h
elastic-webhook-server-cert Opaque 2 17d
elasticsearch-es-default-es-config Opaque 1 7d9h
elasticsearch-es-default-es-transport-certs Opaque 7 7d9h
elasticsearch-es-elastic-user Opaque 1 7d9h
elasticsearch-es-file-settings Opaque 1 7d9h
*elasticsearch-es-http-ca-internal Opaque 2 7d9h
*elasticsearch-es-http-certs-internal Opaque 3 7d9h
*elasticsearch-es-http-certs-public Opaque 2 7d9h
elasticsearch-es-internal-users Opaque 5 7d9h
*elasticsearch-es-remote-ca Opaque 1 7d9h
elasticsearch-es-transport-ca-internal Opaque 2 7d9h
*elasticsearch-es-transport-certs-public Opaque 1 d9h
elasticsearch-es-xpack-file-realm Opaque 4 7d9h
fleet-server-agent-config Opaque 1 7d8h
fleet-server-agent-envvars Opaque 1 7d8h
fleet-server-agent-es-elastic-system-elasticsearch-ca Opaque 2 7d9h
fleet-server-agent-http-ca-internal Opaque 2 7d9h
fleet-server-agent-http-certs-internal Opaque 3 7d9h
*fleet-server-agent-http-certs-public Opaque 2 8d
fleet-server-agent-kb-user Opaque 1 7d9h
*fleet-server-agent-kibana-ca Opaque 2 7d9h
fleet-server-elastic-system-elasticsearch-agent-user Opaque 4 7d9h
kibana-kb-config Opaque 2 7d9h
kibana-kb-es-ca Opaque 2 7d9h
kibana-kb-http-ca-internal Opaque 2 7d9h
kibana-kb-http-certs-internal Opaque 3 7d9h
kibana-kb-http-certs-public Opaque 2 7d9h
kibana-kibana-user Opaque 4 7d9h
```