Fluentd unable to connect to AWS elasticsearch service using fluent-plugin-elasticsearch – Debian

I launched an AWS Elasticsearch 7.10 managed service cluster and connected an EKS cluster to it with this Fluentd docker image:

fluent/fluentd-kubernetes-daemonset:v1.12.0-debian-elasticsearch7-1.0

Deploy manifest:

piVersion: apps/v1
kind: DaemonSet
metadata:
  name: fluentd
  namespace: kube-system
  labels:
    k8s-app: fluentd-logging
    version: v1
spec:
  selector:
    matchLabels:
      k8s-app: fluentd-logging
      version: v1
  template:
    metadata:
      labels:
        k8s-app: fluentd-logging # This label will help group your daemonset pods
        version: v1
    spec:
      serviceAccountName: fluentd
      tolerations:
        - key: node-role.kubernetes.io/master
          effect: NoSchedule # This will ensure fluentd collects master logs too
      containers:
        - name: fluentd
          image: fluent/fluentd-kubernetes-daemonset:v1.12.0-debian-elasticsearch7-1.0
          env:
            - name:  FLUENT_ELASTICSEARCH_HOST
              value: {{ .Values.elasticSearch.loggingHost | quote }}
            - name:  FLUENT_ELASTICSEARCH_PORT
              value: {{ .Values.elasticSearch.port | quote }}
            - name: FLUENT_ELASTICSEARCH_SCHEME
              value: {{ .Values.elasticSearch.scheme | quote }}
            #- name: FLUENT_ELASTICSEARCH_USER
            #  value: "elastic"
            #- name: FLUENT_ELASTICSEARCH_PASSWORD
            #  value: ""
            - name: K8S_NODE_NAME
              valueFrom:
                fieldRef:
                  fieldPath: spec.nodeName
          resources:
            limits:
              memory: 200Mi
            requests:
              cpu: 100m
              memory: 200Mi
          volumeMounts:
            - name: varlog
              mountPath: /var/log
            - name: varlibdockercontainers
              mountPath: /var/lib/docker/containers
              readOnly: true
            - name: config-volume-fluentd
              mountPath: /fluentd/etc/conf.d/

      terminationGracePeriodSeconds: 30
      volumes:
        - name: config-volume-fluentd
          configMap:
            name: config-volume-fluentd
            defaultMode: 0777

        - name: varlog
          hostPath:
            path: /var/log
        - name: varlibdockercontainers
          hostPath:
            path: /var/lib/docker/containers
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: fluentd
  namespace: kube-system

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: fluentd
rules:
  - apiGroups:
      - ""
    resources:
      - pods
      - namespaces
    verbs:
      - get
      - list
      - watch

---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: fluentd
roleRef:
  kind: ClusterRole
  name: fluentd
  apiGroup: rbac.authorization.k8s.io
subjects:
  - kind: ServiceAccount
    name: fluentd
    namespace: kube-system

Config map:

apiVersion: v1
kind: ConfigMap
metadata:
  name: config-volume-fluentd
  namespace: kube-system
  labels:
    app: fluentd
    kubernetes.io/cluster-service: "true"
#    addonmanager.kubernetes.io/mode: Reconcile
data:
  fluentd.conf: |-

    <filter kubernetes.var.log.containers.app-resolver-**>
      @type parser
      key_name log
      reserve_data true
      remove_key_name_field false
      hash_value_field json_log
      emit_invalid_record_to_error false
      <parse>
        @type json
      </parse>
    </filter>

    <filter kubernetes.var.log.containers.scan-app-**>
      @type parser
      key_name log
      reserve_data true
      remove_key_name_field false
      hash_value_field json_log
      emit_invalid_record_to_error false
      <parse>
        @type json
      </parse>
    </filter>

    <match kubernetes.var.log.containers.app-resolver-**>
      @type elasticsearch
      host {{ .Values.elasticSearch.loggingHost }}
      port {{ .Values.elasticSearch.port }}
      scheme {{ .Values.elasticSearch.scheme }}
      log_es_400_reason true
      logstash_format true
      logstash_dateformat {{ .Values.elasticSearch.dateFormat }}
      logstash_prefix k8s-sqs-services
    </match>

    <match kubernetes.var.log.containers.scan-app-**>
      @type elasticsearch
      host {{ .Values.elasticSearch.loggingHost }}
      port {{ .Values.elasticSearch.port }}
      scheme {{ .Values.elasticSearch.scheme }}
      log_es_400_reason true
      logstash_format true
      logstash_dateformat {{ .Values.elasticSearch.dateFormat }}
      logstash_prefix k8s-sqs-services
    </match>

  containers.input.conf: |-
    <match raw.kubernetes.**>
      @id raw.kubernetes
      @type detect_exceptions
      remove_tag_prefix raw
      message log
      stream stream
      multiline_flush_interval 5
      max_bytes 500000
      max_lines 1000
    </match>
  system.conf: |-
    <system>
      root_dir /tmp/fluentd-buffers/
    </system>
  system.input.conf: |-

    <source>
      @id cluster-autoscaler.log
      @type tail
      format multiline
      multiline_flush_interval 5s
      format_firstline /^wd{4}/
      format1 /^(?<severity>w)(?<time>d{4} [^s]*)s+(?<pid>d+)s+(? 
    <source>
      [^ ]]+)] (?<message>.*)/
      time_format %m%d %H:%M:%S.%N
      path /var/log/cluster-autoscaler.log
      pos_file /var/log/cluster-autoscaler.log.pos
      tag cluster-autoscaler
    </source>