===========
not working
===========

Here are the current issues I'm facing with my deployment.

.. _ca certificates:

eck with CA certificates
^^^^^^^^^^^^^^^^^^^^^^^^

Very similar situation to the above with the same outcome.

The CA certificate I used was an intermediate certificate for my home CA
setup though.
Perhaps that caused an issue? I can try with a top level CA cert at some point.

.. _ingress to https:

ingress via https to elasticsearch/kibana
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

This only happens when tls security is enabled in elasticsearch/kibana.
Running them without encryption makes everything work just fine.

Creating an `ingress` to the services opened by elasticsearch and
kibana results in `500` errors in nginx.
nginx tries to connect to elasticsearch using `http` even when `https`
is enabled.

I believe some combinations of nginx _annotations is necessary to get this
to work, but I haven't had time to figure out the exact incantation necessary.


.. _fleet error:

error when loading fleet app
^^^^^^^^^^^^^^^^^^^^^^^^^^^^

An external fleet server was added to the cluster, but the following error appears
when accessing the fleet app in Kibana:

.. code-block:: console

   Error when reading Uninstall Token: Unable to decrypt attribute "token"

This is some kind of encryption issue, but not sure where it's coming from yet.





.. LINKS
.. _certificates: https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-tls-certificates.html#k8s-setting-up-your-own-certificate
.. _annotations: https://github.com/kubernetes/ingress-nginx/blob/main/docs/user-guide/nginx-configuration/annotations.md