# Kibana POD is in not ready after enabling the https traffic from Kiabna to Elasticsearch

**URL:** <https://discuss.elastic.co/t/kibana-pod-is-in-not-ready-after-enabling-the-https-traffic-from-kiabna-to-elasticsearch/285118>\
**Category:** Kibana\
**Tags:** docker\
**Created:** [September 24, 2021, 11:47pm UTC](https://discuss.elastic.co/t/kibana-pod-is-in-not-ready-after-enabling-the-https-traffic-from-kiabna-to-elasticsearch/285118 "2021-09-24T23:47:09Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ls4074](https://avatars.discourse-cdn.com/v4/letter/l/a9a28c/32.png) [@ls4074](https://discuss.elastic.co/u/ls4074)\
**Post date:** [September 24, 2021, 11:47pm UTC](https://discuss.elastic.co/t/kibana-pod-is-in-not-ready-after-enabling-the-https-traffic-from-kiabna-to-elasticsearch/285118/1 "2021-09-24T23:47:09Z")

</div>

Hello,

I have enabled the http layer and transport layer (security basic setup plus https) on Elasticsearch. the ES master and data pods are all running fine. I then configured the values.yaml in Kibana helm chart with the following:  
kibanaConfig:  
kibana.yml: |  
kibana:  
Elasticsearch.ssl.certificateAuthorities: /usr/share/kibana/config/certs/elastic-ca.pem  
secretMounts:  
- name: elastic-ca-pem  
secretName: elastic-ca-pem  
path: /usr/share/kibana/config/certs/elastic-ca.pem

After restarting Kibana, the pod is in not ready state. the kibana.log shows:  
{"type":"log","@timestamp":"2021-09-24T21:16:19+00:00","tags":["error","savedobjects-service"],"pid":952,"message":"Unable to retrieve version information from Elasticsearch nodes."}

Inside of Kibana pod, I can run curl against Elasticsearch without --cacert.

```auto
tysh-4.4$ crul -k -u elastic https://elasticsearch-master:9200
sh: crul: command not found
sh-4.4$ curl -k -u elastic https://elasticsearch-master:9200
Enter host password for user 'elastic':
{
  "name" : "elasticsearch-master-0",
  "cluster_name" : "elasticsearch",
  "cluster_uuid" : "3vMs0RouRtWdD4tiT_wAWQ",
  "version" : {
    "number" : "7.13.2",
    "build_flavor" : "default",
    "build_type" : "docker",
    "build_hash" : "4d960a0733be83dd2543ca018aa4ddc42e956800",
    "build_date" : "2021-06-10T21:01:55.251515791Z",
    "build_snapshot" : false,
    "lucene_version" : "8.8.2",
    "minimum_wire_compatibility_version" : "6.8.0",
    "minimum_index_compatibility_version" : "6.0.0-beta1"
  },
  "tagline" : "You Know, for Search"
}

If I specify --cacert, then got failure
sh-4.4$ curl --cacert ./elastic-stack-ca.pem -u elastic https://elasticsearch-master:9200
Enter host password for user 'elastic':
curl: (60) SSL certificate problem: self signed certificate in certificate chain
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

Any thoughts why the Kibana pod is in NOT ready state?

```

---

<div class="post-metadata">

**Author:** ![azasypkin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/azasypkin/32/42216_2.png) [@azasypkin](https://discuss.elastic.co/u/azasypkin)\
**Post date:** [October 18, 2021, 10:19am UTC](https://discuss.elastic.co/t/kibana-pod-is-in-not-ready-after-enabling-the-https-traffic-from-kiabna-to-elasticsearch/285118/2 "2021-10-18T10:19:35Z")

</div>

> [@ls4074](#):
>
> Elasticsearch.ssl.certificateAuthorities: /usr/share/kibana/config/certs/elastic-ca.pem

Can you try to use lowercase `elasticsearch.ssl.certificateAuthorities: ...`? If it doesn't help, enabling verbose logs in Kibana can give us more debug info.

Best,  
Oleg

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 15, 2021, 10:19am UTC](https://discuss.elastic.co/t/kibana-pod-is-in-not-ready-after-enabling-the-https-traffic-from-kiabna-to-elasticsearch/285118/3 "2021-11-15T10:19:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.