The agent uses certificate pinning to verify the communication to Kibana and Elasticsearch, we need a way to override the hash and host if the TLS termination is not done at our application level.
fleet:
ca_sha256: XXXXXXXX # SHA256 hash of CA cert
kibana:
publish_host: https://domain:port/ # URL where Agent can talk to Fleet
ca_sha256: # defaults to fleet.ca_sha256
elasticsearch: # local ES cluster
publish_host: https://domain:port/ # URL where Agent can talk to ES
# defaults to elasticsearch.hosts
ca_sha256: # defaults to fleet.ca_sha256
The agent uses certificate pinning to verify the communication to Kibana and Elasticsearch, we need a way to override the hash and host if the TLS termination is not done at our application level.