# Elasticsearch-Kibana- Deployment issues in Anthos on-prem K8s cluster **URL:** \ **Category:** Elastic Cloud on Kubernetes (ECK)\ **Tags:** docker\ **Created:** [September 20, 2023, 1:44pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-deployment-issues-in-anthos-on-prem-k8s-cluster/343465 "2023-09-20T13:44:01Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![Esakki](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/esakki/32/126509_2.png) [@Esakki](https://discuss.elastic.co/u/Esakki)\ **Post date:** [September 20, 2023, 1:44pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-deployment-issues-in-anthos-on-prem-k8s-cluster/343465/1 "2023-09-20T13:44:01Z")
Hi Team, We have Anthos on-prem K8s, where we need to deploy Elasticsearch and Kibana, I used the attached .yaml file but it's not working.. I have two DNS created for Elasticsearch and Kibana something like this [elasticsearch.uat.domain.com](http://elasticsearch.uat.domain.com) & [kibana.uat.domain.com](http://kibana.uat.domain.com) also we have two different IPs registered with these DNS, and we got the certificate for these two DNSs.. (same certificate for both DNS).. Kind.elasticsearch.yaml `apiVersion: [elasticsearch.k8s.elasic.co/v1](http://elasticsearch.k8s.elasic.co/v1) kind: Elasticsearch metadata: name: elasticsearch spec: version: 8.9.1 http: service: spec: type: LoadBalancer loadBalancerIP: {ElasticLBIP} ports: - name: https port: 443 nodeSets: - name: master-nodes count: 3 config: node.roles: ["master"] podTemplate: spec: initContainers: - name: sysctl securityContext: privileged: true runAsUser: 0 command: ['sh', '-c', 'sysctl -w vm.max\_map\_count=262144'] env: - name: ES\_JAVA\_OPTS value: -Xms2g -Xmx2g - name: bootstrap.memory\_lock value: 'true' volumes: - name: elasticsearch-tls-secret secret: secretName: esuatcert containers: - name: elasticsearch image: [docker.elastic.co/elasticsearch/elasticsearch:8.9.1](http://docker.elastic.co/elasticsearch/elasticsearch:8.9.1) ports: - containerPort: 443 volumeMounts: - name: elasticsearch-tls-secret mountPath: /usr/share/elasticsearch/config/ssl readOnly: true volumeClaimTemplates: - metadata: name: elasticsearch-data spec: accessModes: - ReadWriteOnce resources: requests: storage: 2Gi cpu: 500m memory: 1Gi limits: cpu: 500m memory: 1Gi storageClassName: standard - name: data-nodes count: 3 config: node.roles: ["data"] podTemplate: spec: initContainers: - name: sysctl securityContext: privileged: true runAsUser: 0 command: ['sh', '-c', 'sysctl -w vm.max\_map\_count=262144'] env: - name: ES\_JAVA\_OPTS value: -Xms2g -Xmx2g - name: bootstrap.memory\_lock value: 'true' volumeClaimTemplates: - metadata: name: elasticsearch-data spec: accessModes: - ReadWriteOnce resources: requests: storage: 5Gi cpu: 2000m memory: 4Gi limits: cpu: 2000m memory: 4Gi storageClassName: standard` kind.kibana.yaml `apiVersion: kibana.k8s.elastic.co/v1 kind: Kibana metadata: name: elasticsearch namespace: uat-elasticsearch spec: version: 8.9.1 http: tls: selfSignedCertificate: disabled: true certificate: secretName: esuat-cert service: spec: type: LoadBalancer loadBalancerIP: {KibanaLBIP} ports: - name: https port: 443 count: 2 elasticsearchRef: name: elasticsearch` Can someone help me what mistakes we are making here ? , Kind Regards, Esakki ---
**Author:** ![Esakki](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/esakki/32/126509_2.png) [@Esakki](https://discuss.elastic.co/u/Esakki)\ **Post date:** [September 20, 2023, 3:56pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-deployment-issues-in-anthos-on-prem-k8s-cluster/343465/2 "2023-09-20T15:56:36Z")
Hello @Sunile_Manjee I saw in one of the case that you are an expert in ECK, could you please help with making this deployment success, I think we messed up the yaml s by referring different examples.. really not getting an idea how to make this work.. please do the needful many thanks in advance. Kind Regards, Esakki ---
**Author:** ![Sunile\_Manjee](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sunile_manjee/32/111461_2.png) [@Sunile\_Manjee](https://discuss.elastic.co/u/Sunile_Manjee)\ **Post date:** [September 20, 2023, 5:29pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-deployment-issues-in-anthos-on-prem-k8s-cluster/343465/3 "2023-09-20T17:29:16Z")
@Esakki couple things I need from you to try and help debug this 1. Have you deployed the operator? `kubectl get pods -n elastic-system` 2. Can you elaborate on what happens when you deploy the YAMLs? Do you see any pods initializing? Do you encounter any errors during deployment? `kubectl get pods -l elasticsearch.k8s.elastic.co/cluster-name= elasticsearch ` 3. Have you set up a baseline working example without using custom DNS? I often do this before further customizing the YAMLs. [ElasticKonductor](https://github.com/sunileman/ElasticKonductor) provides great examples. Additionally, [cloud-on-eck](https://github.com/elastic/cloud-on-k8s/tree/main/deploy/eck-stack/examples) has numerous examples. 4. Please post your YAMLs using the "preformatted text" option. Without it, it's challenging to test with your YAMLs. ---
**Author:** ![Esakki](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/esakki/32/126509_2.png) [@Esakki](https://discuss.elastic.co/u/Esakki)\ **Post date:** [September 20, 2023, 5:40pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-deployment-issues-in-anthos-on-prem-k8s-cluster/343465/4 "2023-09-20T17:40:06Z")
@Sunile_Manjee Many thanks for your response here are the requested details, ![image](https://us1.discourse-cdn.com/elastic/original/3X/a/2/a263ab178a63fcbe41dc0094ea18d2ad20a8ca93.png) ```auto apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: name: elasticsearch spec: version: 8.9.1 transport: tls: subjectAltNames: - dns: elasticsearch.appsuat.my.domain http: service: spec: type: LoadBalancer loadBalancerIP: {ElasticSearch LB-IP} nodeSets: - name: master-nodes count: 3 config: node.roles: ["master"] podTemplate: spec: initContainers: - name: sysctl securityContext: privileged: true runAsUser: 0 command: ['sh', '-c', 'sysctl -w vm.max_map_count=262144'] env: - name: ES_JAVA_OPTS value: -Xms2g -Xmx2g - name: bootstrap.memory_lock value: 'true' volumeClaimTemplates: - metadata: name: elasticsearch-data spec: accessModes: - ReadWriteOnce resources: requests: storage: 2Gi cpu: 500m memory: 1Gi limits: cpu: 500m memory: 1Gi storageClassName: standard - name: data-nodes count: 3 config: node.roles: ["data"] podTemplate: spec: initContainers: - name: sysctl securityContext: privileged: true runAsUser: 0 command: ['sh', '-c', 'sysctl -w vm.max_map_count=262144'] env: - name: ES_JAVA_OPTS value: -Xms2g -Xmx2g - name: bootstrap.memory_lock value: 'true' volumeClaimTemplates: - metadata: name: elasticsearch-data spec: accessModes: - ReadWriteOnce resources: requests: storage: 5Gi cpu: 2000m memory: 4Gi limits: cpu: 2000m memory: 4Gi storageClassName: standard ``` ```auto apiVersion: kibana.k8s.elastic.co/v1 kind: Kibana metadata: name: elasticsearch spec: version: 8.9.1 count: 2 elasticsearchRef: name: elasticsearch http: service: spec: type: LoadBalancer loadBalancerIP: {Kibana LB-IP} tls: certificate: secretName: esuat-cert podTemplate: spec: containers: - name: kibana resources: requests: memory: 2Gi cpu: 1000m limits: memory: 2Gi cpu: 1000m env: - name: ES_JAVA_OPTS value: "-Xms1g -Xmx1g" ``` Kind Regards, Esakki ---
**Author:** ![Sunile\_Manjee](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sunile_manjee/32/111461_2.png) [@Sunile\_Manjee](https://discuss.elastic.co/u/Sunile_Manjee)\ **Post date:** [September 21, 2023, 3:19am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-deployment-issues-in-anthos-on-prem-k8s-cluster/343465/5 "2023-09-21T03:19:36Z")
In your Kibana manifest why are you `{Kibana LB-IP}`? If you don't have a specific IP, you can remove this line altogether, and Kubernetes will automatically assign one for you. Maybe this is what you intended, a specific IP. You also don't need ```auto env: - name: ES_JAVA_OPTS value: "-Xms1g -Xmx1g" ``` Kibana will take up half the available to it on the pod. Your pods are running, that's good. Are you able to reach Kibana via the LB service deployed? `https://elasticsearch-kb-http-External-IP>:443`. Can you please verify the LB service is serving Kibana pods? Fetch the details of the service to see which label selector it uses. `kubectl describe svc elasticsearch-kb-http` Then run `kubectl get pods -l key=value` Replace `key=value` with the actual label selector you found in the previous step. If there are multiple labels, you can comma-separate them like `-l key1=value1,key2=value2`. This command will show you the list of pods that the `elasticsearch-kb-http` service is targeting. Can you please elaborate on what is the issue you are experiencing? I am guessing that you are not able to reach Kibana. If that is accurate, what exactly is error. ---
**Author:** ![Esakki](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/esakki/32/126509_2.png) [@Esakki](https://discuss.elastic.co/u/Esakki)\ **Post date:** [September 21, 2023, 5:27am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-deployment-issues-in-anthos-on-prem-k8s-cluster/343465/6 "2023-09-21T05:27:33Z")
@Sunile_Manjee thanks for your response, please find the details below. 1. In your Kibana manifest why are you `{Kibana LB-IP}` ? - Yes, I have a separate loadbalancer IP that I have configured in kibana svc, type:LoadBalancer and the IP as well. 2. I'm unable to run this `https://elasticsearch-kb-http-External-IP>:443` . browser and in local as curl cmd, here I replaced the external IP with my kibana loadbalancer IP, that I referred in in the above point#1. 3. Kubectl describe svc elasticsearch-svc , 4. kubectl describe svc kibana-svc ( here the LB IP is different than the one used in elasticsearch svc) 5. Kibana pods `elasticsearch-kb-http` service is targeting. ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/0/60d64630231549404427e608e8b325ecfe55e240.png) Error Details: Kibana is not working, because Elasticsearch is not running and not reachable. So looks like I'm missing something related to my certificate config in the elasticsearch.yaml file? Elasticsearch ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/c/5c09a23fa589395585bae57837c07eeccd756b58.png) Kibana ![image](https://us1.discourse-cdn.com/elastic/original/3X/9/d/9da0a8b0fb79a25b2ba118b56bfd08dae662299e.png) what we are trying is, deploy 3 master and 3 data nodes and 2 kibana nodes in K8s cluster.. and we want to use the custom DNS created for both ES and Kibana and that should run in 443 port. Kind Regards, Esakki ---
**Author:** ![Esakki](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/esakki/32/126509_2.png) [@Esakki](https://discuss.elastic.co/u/Esakki)\ **Post date:** [September 21, 2023, 12:26pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-deployment-issues-in-anthos-on-prem-k8s-cluster/343465/7 "2023-09-21T12:26:30Z")
@Sunile_Manjee Here is the latest status of my deployment, Elasticsearch ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/e/ee26122694728114950b4b70f8ddfc0060daf941.jpeg) Kibana ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/9/296cb826cd358acc8e5ee14a5708eb5f3dfddd59.png) I'm not sure how to resolve that cert issue in elasticsearch, I tried few suggestions but not working. Kind Regards, Esakk ---
**Author:** ![Esakki](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/esakki/32/126509_2.png) [@Esakki](https://discuss.elastic.co/u/Esakki)\ **Post date:** [September 21, 2023, 2:39pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-deployment-issues-in-anthos-on-prem-k8s-cluster/343465/8 "2023-09-21T14:39:10Z")
@Sunile_Manjee here is the last Elasticsearch.yaml that I have used. ```auto apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: name: elasticsearch spec: version: 8.9.1 http: tls: selfSignedCertificate: disabled: true certificate: secretName: esuatcert service: spec: type: LoadBalancer loadBalancerIP: 100.12.2.12 ports: - name: https port: 443 nodeSets: - name: master-nodes count: 3 config: node.roles: ["master"] podTemplate: spec: initContainers: - name: sysctl securityContext: privileged: true runAsUser: 0 command: ['sh', '-c', 'sysctl -w vm.max_map_count=262144'] env: - name: ES_JAVA_OPTS value: -Xms2g -Xmx2g - name: bootstrap.memory_lock value: 'true' volumeClaimTemplates: - metadata: name: elasticsearch-data spec: accessModes: - ReadWriteOnce resources: requests: storage: 2Gi cpu: 500m memory: 1Gi limits: cpu: 500m memory: 1Gi storageClassName: standard - name: data-nodes count: 3 config: node.roles: ["data"] podTemplate: spec: initContainers: - name: sysctl securityContext: privileged: true runAsUser: 0 command: ['sh', '-c', 'sysctl -w vm.max_map_count=262144'] env: - name: ES_JAVA_OPTS value: -Xms2g -Xmx2g - name: bootstrap.memory_lock value: 'true' volumeClaimTemplates: - metadata: name: elasticsearch-data spec: accessModes: - ReadWriteOnce resources: requests: storage: 5Gi cpu: 2000m memory: 4Gi limits: cpu: 2000m memory: 4Gi storageClassName: standard ``` Kind Regards, Esakki ---
**Author:** ![Esakki](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/esakki/32/126509_2.png) [@Esakki](https://discuss.elastic.co/u/Esakki)\ **Post date:** [September 22, 2023, 12:27pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-deployment-issues-in-anthos-on-prem-k8s-cluster/343465/9 "2023-09-22T12:27:16Z")
@Sunile_Manjee Could you please help what I'm missing here? Regards, Esakki ---
**Author:** ![Esakki](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/esakki/32/126509_2.png) [@Esakki](https://discuss.elastic.co/u/Esakki)\ **Post date:** [September 22, 2023, 2:48pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-deployment-issues-in-anthos-on-prem-k8s-cluster/343465/10 "2023-09-22T14:48:39Z")
@Sunile_Manjee I can see that, my cert itself it's not been taken by the nodes/pods.. it's taking only the default elasticsearch certs.. I just noticed this in the browser while viewing the cert. | Common Name (CN) | elasticsearch-http | | --- | --- | | Organization (O) | | Kind Regards, Esakki ---
**Author:** ![Esakki](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/esakki/32/126509_2.png) [@Esakki](https://discuss.elastic.co/u/Esakki)\ **Post date:** [September 22, 2023, 4:11pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-deployment-issues-in-anthos-on-prem-k8s-cluster/343465/11 "2023-09-22T16:11:52Z")
Hi @Sunile_Manjee , Still facing the same certificate issue.. In the mean time as per my attached ES .yaml file I have 3 master and 3 data nodes, my client is asking for routing the client requests only to data nodes/pod not to master nodes how can I achieve this? is this possible? Kind Regards, Esakki ---
**Author:** ![Esakki](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/esakki/32/126509_2.png) [@Esakki](https://discuss.elastic.co/u/Esakki)\ **Post date:** [September 25, 2023, 5:36am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-deployment-issues-in-anthos-on-prem-k8s-cluster/343465/12 "2023-09-25T05:36:32Z")
@Wes_Plunk Hello Sir, I come to know that you have enough experience with Elasticsearch (I just gone through one of your post you raised on 2013).. is that possible for you to help here on the above ask please? Kind Regards, Esakki ---
**Author:** ![Sunile\_Manjee](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sunile_manjee/32/111461_2.png) [@Sunile\_Manjee](https://discuss.elastic.co/u/Sunile_Manjee)\ **Post date:** [September 25, 2023, 3:24pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-deployment-issues-in-anthos-on-prem-k8s-cluster/343465/13 "2023-09-25T15:24:15Z")
> [@Esakki](#): > > `esuat-cert` does your kibana manifest include ```auto selfSignedCertificate: disabled: true ``` ---
**Author:** ![Esakki](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/esakki/32/126509_2.png) [@Esakki](https://discuss.elastic.co/u/Esakki)\ **Post date:** [September 25, 2023, 3:54pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-deployment-issues-in-anthos-on-prem-k8s-cluster/343465/14 "2023-09-25T15:54:45Z")
@Sunile_Manjee Hi Sunil, Thank you for your response. Yeah yes, I have it. ```auto http: tls: selfSignedCertificate: disabled: true certificate: secretName: esuat-cert ``` Also, my client want only master and data nodes/pods and the requests should go only to the data nodes not to the master nodes, how to achieve this, right now when I hit my elasticsearch url (DNS), in browser the requests has been routed to either master or data nodes. Kind Regards, Esakki ---
**Author:** ![Sunile\_Manjee](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sunile_manjee/32/111461_2.png) [@Sunile\_Manjee](https://discuss.elastic.co/u/Sunile_Manjee)\ **Post date:** [September 25, 2023, 4:08pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-deployment-issues-in-anthos-on-prem-k8s-cluster/343465/15 "2023-09-25T16:08:48Z")
try to track your latest status. you are able to reach ES via api and Kibana. However when you use your custom certs, you are not able to reach Kibana. Is that accurate? Please provide full kibana yaml and please take a look at Kibana logs to view errors. ---
**Author:** ![Esakki](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/esakki/32/126509_2.png) [@Esakki](https://discuss.elastic.co/u/Esakki)\ **Post date:** [September 25, 2023, 4:38pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-deployment-issues-in-anthos-on-prem-k8s-cluster/343465/16 "2023-09-25T16:38:29Z")
@Sunile_Manjee here is the Kind-kibana.yaml that I have used. ```auto apiVersion: kibana.k8s.elastic.co/v1 kind: Kibana metadata: name: elasticsearch namespace: uat-elasticsearch spec: version: 8.9.1 http: tls: selfSignedCertificate: disabled: true certificate: secretName: esuat-cert service: spec: type: LoadBalancer loadBalancerIP: 10.12.2.14 ports: - name: https port: 443 count: 2 elasticsearchRef: name: elasticsearch ``` Attaching SS for your reference( I'm new to Elastic Search, may be I'm doing some simple mistake in config, but I'm not sure what is wrong here) Kibana - working fine. ![Kibana](https://us1.discourse-cdn.com/elastic/original/3X/f/5/f52aced9976ee53e03454c2e072533b286ed82a8.png) Elasticsearch taking only Local Certificate. ![image](https://us1.discourse-cdn.com/elastic/original/3X/1/e/1e56e364d89aa671b93a25a52b015c269ead5bff.png) So, both Elasticsearch and Kibana deployments are working, only that "Not Secure" certificate error in Elasticsearch as highlighted in the above SS. And I'm using same certificate for both Kibana and Elasticsearch but Load Balancer IP and the secrets are different. Kind Regards, Esakki ---
**Author:** ![Esakki](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/esakki/32/126509_2.png) [@Esakki](https://discuss.elastic.co/u/Esakki)\ **Post date:** [September 27, 2023, 8:19am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-deployment-issues-in-anthos-on-prem-k8s-cluster/343465/17 "2023-09-27T08:19:35Z")
@Sunile_Manjee Any suggestions please? it's been a while and client is chasing for this ☹ Regards, Esakki ---
**Author:** ![Esakki](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/esakki/32/126509_2.png) [@Esakki](https://discuss.elastic.co/u/Esakki)\ **Post date:** [September 29, 2023, 1:03pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-deployment-issues-in-anthos-on-prem-k8s-cluster/343465/18 "2023-09-29T13:03:28Z")
@Sunile_Manjee I have resolved the certificate issue, when I used different certs for Elasticsearch and Kibana, cert issue got resolved. Now, when I launch Kibana URL it's not working, it's unable to reach/communicate with elasticsearch, what config changed I have to do in kibana.yaml can you give some sample code? ![](data:image/png;base64,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) Kind Regards, Esakki ---
**Author:** ![Esakki](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/esakki/32/126509_2.png) [@Esakki](https://discuss.elastic.co/u/Esakki)\ **Post date:** [September 29, 2023, 2:14pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-deployment-issues-in-anthos-on-prem-k8s-cluster/343465/19 "2023-09-29T14:14:03Z")
@Sunile_Manjee here is my latest kibana.yaml ```auto apiVersion: kibana.k8s.elastic.co/v1 kind: Kibana metadata: name: elasticsearch namespace: uat-elasticsearch spec: version: 8.9.1 http: tls: selfSignedCertificate: disabled: true certificate: secretName: esuat-cert service: spec: type: LoadBalancer loadBalancerIP: 10.1.2.1 ports: - name: https port: 443 protocol: TCP targetPort: 5601 count: 2 config: elasticsearch.hosts: - https://elasticsearch.appsuat.mydomain elasticsearch.ssl.certificate: /usr/share/kibana/config/elasticsearch-certs/tls.crt elasticsearchRef: name: elasticsearch ``` ---
**Author:** ![Esakki](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/esakki/32/126509_2.png) [@Esakki](https://discuss.elastic.co/u/Esakki)\ **Post date:** [October 11, 2023, 5:05pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-deployment-issues-in-anthos-on-prem-k8s-cluster/343465/20 "2023-10-11T17:05:38Z")
@Sunile_Manjee I kept different cert for elasticsearch and kibana that resolved the issue. [Next page](https://discuss.elastic.co/t/elasticsearch-kibana-deployment-issues-in-anthos-on-prem-k8s-cluster/343465.md?page=2)