# OpenShift4 Fleet Agent Operator failing to create deployment script

**URL:** <https://discuss.elastic.co/t/openshift4-fleet-agent-operator-failing-to-create-deployment-script/346735>\
**Category:** Elastic Cloud on Kubernetes (ECK)\
**Tags:** fleet\
**Created:** [November 8, 2023, 6:17pm UTC](https://discuss.elastic.co/t/openshift4-fleet-agent-operator-failing-to-create-deployment-script/346735 "2023-11-08T18:17:17Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![istmead](https://avatars.discourse-cdn.com/v4/letter/i/a9a28c/32.png) [@istmead](https://discuss.elastic.co/u/istmead)\
**Post date:** [November 8, 2023, 6:17pm UTC](https://discuss.elastic.co/t/openshift4-fleet-agent-operator-failing-to-create-deployment-script/346735/1 "2023-11-08T18:17:17Z")

</div>

Trying to deploy Fleet Agent Operator. But the deployment script fails to generate. The operator get hung up on this event "Post "[https://kibana-kb-http.elastic-monitoring.svc:5601/api/fleet/setup](https://kibana-kb-http.elastic-monitoring.svc:5601/api/fleet/setup)": x509: certificate signed by unknown authority"

```auto
apiVersion: kibana.k8s.elastic.co/v1
kind: Kibana
metadata:
  name: kibana
spec:
  version: 8.10.4
  count: 1
  http:
    service:
      metadata:
        annotations:
          # request ECK to create the Kibana service with the following annotation
          service.beta.openshift.io/serving-cert-secret-name: "kibana-openshift-tls"
    tls:
      certificate:
        # use the previously created Secret to on the Kibana endpoint
        secretName: kibana-openshift-tls
  elasticsearchRef:
    name: elasticsearch
  config:
    xpack.fleet.agents.elasticsearch.hosts: ["https://elasticsearch-es-http.elastic-monitoring.svc.cluster.local:9200"]
    xpack.fleet.agents.fleet_server.hosts: ["https://fleet-server-agent-http.elastic-monitoring.svc.cluster.local:8220"]
    xpack.fleet.packages:
    - name: system
      version: latest
    - name: elastic_agent
      version: latest
    - name: fleet_server
      version: latest
    - name: kubernetes
      version: latest
    xpack.fleet.agentPolicies:
    - name: Fleet Server on ECK policy
      id: eck-fleet-server
      namespace: default
      monitoring_enabled:
      - logs
      - metrics
      unenroll_timeout: 900
      package_policies:
      - name: fleet_server-1
        id: fleet_server-1
        package:
          name: fleet_server
    - name: Elastic Agent on ECK policy
      id: eck-agent
      namespace: default
      monitoring_enabled:
      - logs
      - metrics
      unenroll_timeout: 900
      package_policies:
      - package:
          name: system
        name: system-1
      - package:
          name: kubernetes
        name: kubernetes-1
---
apiVersion: elasticsearch.k8s.elastic.co/v1
kind: Elasticsearch
metadata:
  name: elasticsearch
spec:
  version: 8.10.4
  nodeSets:
  - name: data
    count: 3
    config:
      node.store.allow_mmap: false
---
apiVersion: agent.k8s.elastic.co/v1alpha1
kind: Agent
metadata:
  name: fleet-server
spec:
  version: 8.10.4
  kibanaRef:
    name: kibana
  elasticsearchRefs:
  - name: elasticsearch
  mode: fleet
  fleetServerEnabled: true
  policyID: eck-fleet-server
  deployment:
    replicas: 1
    podTemplate:
      spec:
        serviceAccountName: fleet-server
        automountServiceAccountToken: true
        securityContext:
          runAsUser: 0

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 6, 2023, 6:17pm UTC](https://discuss.elastic.co/t/openshift4-fleet-agent-operator-failing-to-create-deployment-script/346735/2 "2023-12-06T18:17:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.