Fleet Server - disable certificate verification

[Rnx (Radoslav Nagy)]

Hi

How can I disable cert verification on integrations running on Fleet Server?

The agent (fleet server) is Fleet Managed, running as a service on Linux. All agents are running well, sending logs and metrics, however, Agent with fleet server is not. I need to run an integration on it, as it should grab metrics from Elasticsearch node and both are running on the same server. The integration, however, doesn't send data into Elastic, because of the "wrong" certificate. The certificates are signed by selfsigned CA and they have no info about dns, hostnames, or IP addresses. To recertificate whole implementation would be pain in the ass, so my question is, if there is any way how to force "Fleet Server Agent + inthegrations" not to validate such certificate. Version of the Elastic and Fleet Agents is 9.5.1. I really don't need to harden the cluster with super duper certificate, as it is in sealed environment.

[stephenb (Stephen Brown)]

Hi @Rnx

Not sure I am completely following (because there are a number of places where SSL validation comes into play), but if you want to do no SSL validation on any any integration output did you try...

Fleet → Settings → Outputs → edit the output → Advanced YAML configuration:

yaml

ssl.verification_mode: none

BTW there are some issues (query side) with 9.5.1 i'd keep an eye out for 9.5.2 and probably upgrade to it when it comes out.