just one node without using standalone mode. I found out that the main problem is kibana need a password to contact with Elasticsearch, so i go into the Elasticsearch docker container and reset the password for user 'kibana'
./elasticsearch-reset-password -u kibana
then i re-config the kibana like this, set the Elasticsearch node to link and the user-pass, and it succeed !
thx for the reply , i wonder if my issue is a common one because i think it's normal that we dont
really need this TLS/SSL feature on production but its unclear how to close it.