elastic / elastic/integrations
[Universal Profiling Agent] Support with ECE whereby ECE proxies are issued by self-signed untrusted CA certificate
- Dominant language
- Handlebars
- Stars
- 333
- Forks
- 647
- Avg merge
- 3d 4h
- Merged PRs (30d)
- 209
Description
[documentation](https://www.elastic.co/docs/current/integrations/profiler_agent), Universal Profiling Agent is supported against Elastic Cloud which uses a certificate issued by a trusted certificate authority.
This currently does not include support where elasticsearch cluster is hosted in ECE. And when testing to work against an elasticsearch cluster that is behind a load balancer using certificate issued by a self-signed certificate authority. The error will include `Failed to setup gRPC connection (try 1 of 5): context deadline exceeded: connection error: desc = \”transport: authentication handshake failed: tls: failed to verify certificate: x509: certificate signed by unknown authority` which is fully expected as the certificate is not trusted by default
To add support it would require :
- Ability to provide CA certificate
- Ability to set verification mode
- Test if there may be other issues when elasticsearch cluster is not hosted cloud cluster
Contributor guide
Assessment
This issue has not been assessed yet.