Skip to content

[Universal Profiling Agent] Support with ECE whereby ECE proxies are issued by self-signed untrusted CA certificate #11677

Open

Description

documentation, Universal Profiling Agent is supported against Elastic Cloud which uses a certificate issued by a trusted certificate authority.

This currently does not include support where elasticsearch cluster is hosted in ECE. And when testing to work against an elasticsearch cluster that is behind a load balancer using certificate issued by a self-signed certificate authority. The error will include Failed to setup gRPC connection (try 1 of 5): context deadline exceeded: connection error: desc = \”transport: authentication handshake failed: tls: failed to verify certificate: x509: certificate signed by unknown authority which is fully expected as the certificate is not trusted by default

To add support it would require :

  • Ability to provide CA certificate
  • Ability to set verification mode
  • Test if there may be other issues when elasticsearch cluster is not hosted cloud cluster
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions