Self-managed and air-gapped cluster: How to bypass self-signed certificate validation or configure custom endpoints in kibana.yml?

Elastic Stack Kibana
1

Hi everyone,

I manage a self-managed, completely air-gapped Elastic cluster in an isolated network environment with no internet access.

In our corporate infrastructure, we have an internal ERP and EMS running with self-signed SSL certificates, but we do not have access to the original root Certificate Authority (CA) chain that signed them.

When trying to integrate or point services in this environment, I am running into certificate validation errors (such as x509: certificate signed by unknown authority).

Could you please clarify:

  1. What specific configuration parameter(s) should I add in kibana.yml to skip or ignore SSL certificate verification for these components?

  2. Alternatively, how can I properly instruct the platform to trust these custom endpoints/IP addresses without the full CA chain?

Any examples or snippets of the required settings in kibana.yml would be greatly appreciated.

Thanks in advance for your help!