elastic / elastic/integrations

[Universal Profiling Agent] Support with ECE whereby ECE proxies are issued by self-signed untrusted CA certificate

Open
#11,677 2 comments 0 reactions 0 assignees View on GitHub
enhancement Integration:profiler_agent
Dominant language
Handlebars
Stars
333
Forks
647
Avg merge
3d 4h
Merged PRs (30d)
209

Description

[documentation](https://www.elastic.co/docs/current/integrations/profiler_agent), Universal Profiling Agent is supported against Elastic Cloud which uses a certificate issued by a trusted certificate authority.

This currently does not include support where elasticsearch cluster is hosted in ECE. And when testing to work against an elasticsearch cluster that is behind a load balancer using certificate issued by a self-signed certificate authority. The error will include `Failed to setup gRPC connection (try 1 of 5): context deadline exceeded: connection error: desc = \”transport: authentication handshake failed: tls: failed to verify certificate: x509: certificate signed by unknown authority` which is fully expected as the certificate is not trusted by default

To add support it would require :
- Ability to provide CA certificate
- Ability to set verification mode
- Test if there may be other issues when elasticsearch cluster is not hosted cloud cluster

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.