# Is there a method of adding a CA cert (or ignore ssl validation) for a custom prometheus endpoint?
**URL:** https://community.replicated.com/t/is-there-a-method-of-adding-a-ca-cert-or-ignore-ssl-validation-for-a-custom-prometheus-endpoint/988
**Category:** How do I?
**Tags:** kots
**Created:** [September 22, 2022, 11:04pm UTC](https://community.replicated.com/t/is-there-a-method-of-adding-a-ca-cert-or-ignore-ssl-validation-for-a-custom-prometheus-endpoint/988 "2022-09-22T23:04:19Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@Miranda](https://community.replicated.com/u/Miranda)
#### Post date: [September 22, 2022, 11:04pm UTC](https://community.replicated.com/t/is-there-a-method-of-adding-a-ca-cert-or-ignore-ssl-validation-for-a-custom-prometheus-endpoint/988/1 "2022-09-22T23:04:19Z")
Let’s say, from the KOTS UI, we click the “Configure Prometheus Address” setting and give it a custom address. It’s in another namespace, and kotsadm won’t display it because the trust store doesn’t include the cert bundle hash. We’ll instead see something along the following:
{“level”:“error”,“ts”:“2022-02-22T22:22:22Z”,“msg”:“failed to prometheus query range: failed to do req: Get "[https://server.example.com/api/v1/query\_range?end=1234567890&query=fancy\_query\](https://server.example.com/api/v1/query_range?end=1234567890&query=fancy_query%5C)”: x509: certificate signed by unknown authority"}
How would we go about adding that CA cert, or enabling an insecure connection?
---
### Author:  [@dex](https://community.replicated.com/u/dex)
#### Post date: [September 28, 2022, 2:58am UTC](https://community.replicated.com/t/is-there-a-method-of-adding-a-ca-cert-or-ignore-ssl-validation-for-a-custom-prometheus-endpoint/988/2 "2022-09-28T02:58:20Z")
I don’t have an answer but will certainly +1 on this question