I deployed a fleet server using elastic-agent, which runs fine.
For the deployment of an elastic-agent I use --insecure, because the fleet server, Kibana, and elasticsearch use a self-signed certificate.
I get a connection to the fleet server, but not to the elasticsearch, because filebeat and metricbeat don't want to connect.
If a add ssl.certificate_authorities: /etc/elasticsearch-ca.pem to the state.yml file, I get a connection, but is there another, more elegant way doing this?
On Windows this file does not exist, what would I do there?