diff --git a/ansible/roles/kibana/defaults/main.yml b/ansible/roles/kibana/defaults/main.yml
index 5ca8cbb47f..8bbdaa3e27 100644
--- a/ansible/roles/kibana/defaults/main.yml
+++ b/ansible/roles/kibana/defaults/main.yml
@@ -32,7 +32,7 @@ kibana_services:
 kibana_default_app_id: "discover"
 kibana_elasticsearch_request_timeout: 300000
 kibana_elasticsearch_shard_timeout: 0
-kibana_elasticsearch_ssl_verify: false
+kibana_elasticsearch_ssl_verify: true
 
 
 ####################
diff --git a/releasenotes/notes/kibana-tls-verify-8bfcb822268ad0d8.yaml b/releasenotes/notes/kibana-tls-verify-8bfcb822268ad0d8.yaml
new file mode 100644
index 0000000000..addbd07d08
--- /dev/null
+++ b/releasenotes/notes/kibana-tls-verify-8bfcb822268ad0d8.yaml
@@ -0,0 +1,6 @@
+---
+upgrade:
+  - |
+    Changes the default value of ``kibana_elasticsearch_ssl_verify`` from
+    ``false`` to ``true``. `LP#1885110
+    <https://bugs.launchpad.net/kolla-ansible/+bug/1885110>`__