Talk:OpenSearch Cluster Monitoring

To enable cerebro to use self-signed certs (or non-publsihed CAs)

I did the following :

in the application.conf ( with rpm at /etc/cerebro ), add the following to the end :

play.ws.ssl {
  trustManager = {
    stores = [
      { type = "PEM", path = "/etc/cerebro/elastic-stack-ca.pem" }
    ]
  }
}     
play.ws.ssl.loose.acceptAnyCertificate=true 

the pem file is the CA cert in PEM format. You can probably also use the CA p12 file used to setup ES security, but then change the 'type = "PEM"' part to 'type = "pkcs12"'

And (re)start Cerebro.