elastic-agent安装报错“Fleet Server - Error - x509: certificate signed by unknown authority

需要增加https ca证书，如果试验rpm安装默认路径为/etc/elasticsearch/certs/http_ca.crt。elasticssearch版本8.4.3。经过试验，并未生效，依旧报同样的错误。出现这种问题需要增加参数。

fanruitian

2046人浏览 · 2022-10-11 13:38:26

fanruitian · 2022-10-11 13:38:26 发布

elasticssearch版本8.4.3

根据官网的提示https://www.elastic.co/guide/en/fleet/8.4/fleet-troubleshooting.html#agent-enrollment-certs

出现这种问题需要增加参数--insecure

To fix this problem, pass the --insecure flag along with the enroll or install command.

./elastic-agent install --fleet-server-es=https://192.168.0.180:9200 --fleet-server-service-token=AAEAAWVsYXN0aWMvZmxlZXQtc2VydmVyL3Rva2VuLTE2NjU0NjAxNTE0NjM6U3pRNk5DLTZSSi15eFdlLWxtd2JlQQ --fleet-server-policy=fleet-server-policy --insecure

经过试验，并未生效，依旧报同样的错误

需要增加https ca证书，如果试验rpm安装默认路径为/etc/elasticsearch/certs/http_ca.crt

./elastic-agent install --fleet-server-es=https://192.168.0.180:9200 --fleet-server-service-token=AAEAAWVsYXN0aWMvZmxlZXQtc2VydmVyL3Rva2VuLTE2NjU0NjAxNTE0NjM6U3pRNk5DLTZSSi15eFdlLWxtd2JlQQ --fleet-server-policy=fleet-server-policy --fleet-server-es-ca=/etc/elasticsearch/certs/http_ca.crt

测试成功！