# AWX Deployement behind nginx and SAML

**URL:** <https://forum.ansible.com/t/awx-deployement-behind-nginx-and-saml/2431>\
**Category:** Get Help\
**Tags:** kubernetes, nginx, awx, collections\
**Created:** [November 16, 2023, 8:07pm UTC](https://forum.ansible.com/t/awx-deployement-behind-nginx-and-saml/2431 "2023-11-16T20:07:55Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![trippinnik](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/trippinnik/32/4308_2.png) [@trippinnik](https://forum.ansible.com/u/trippinnik)\
**Post date:** [November 16, 2023, 8:07pm UTC](https://forum.ansible.com/t/awx-deployement-behind-nginx-and-saml/2431/1 "2023-11-16T20:07:55Z")

</div>

I’ve been unsuccessful getting AWX to work with SAML authentication behind nginx alb in EKS.

I am running 23.4.0 using AWX-operator 2.7.2 (but have been trying this for quite some time)

I have set  
`csrf_cookie_secure: 'False'`  
since that seemed to be likely cause but has had no impact

my nginx annotations are:

```auto
annotations:
    kubernetes.io/ingress.class: "alb"
    alb.ingress.kubernetes.io/target-type: "ip"
    alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80}, {"HTTPS": 443}]'
    alb.ingress.kubernetes.io/certificate-arn: "arn:foo"
    alb.ingress.kubernetes.io/use-forwarded-headers: "true"
    nginx.ingress.kubernetes.io/configuration-snippet: |
      more_set_headers "X-Forwarded-For $http_x_forwarded_for";

```

What am I missing to get this to work? I’ve tried some other variations but pretty lost on what is wrong here

---

<div class="post-metadata">

**Author:** ![trippinnik](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/trippinnik/32/4308_2.png) [@trippinnik](https://forum.ansible.com/u/trippinnik)\
**Post date:** [November 16, 2023, 10:03pm UTC](https://forum.ansible.com/t/awx-deployement-behind-nginx-and-saml/2431/2 "2023-11-16T22:03:45Z")

</div>

followed this guide: [Chapter&nbsp;5.&nbsp;Configuring proxy support for Red Hat Ansible Automation Platform Red Hat Ansible Automation Platform 2.0-ea | Red Hat Customer Portal](https://access.redhat.com/documentation/en-us/red_hat_ansible_automation_platform/2.0-ea/html/red_hat_ansible_automation_platform_installation_guide/assembly-configuring-proxy-support)

it forced me to enter something in the Proxy IP Allowed List and CSRF Trusted Origins List even though doc says empty list will allow all to be trusted. It is Kubernetes so not a static IP ALB, after entering “” awx is down the the web container throwing:

```auto
  File "/var/lib/awx/venv/awx/lib64/python3.9/site-packages/awx/main/utils/profiling.py", line 129, in stop

```

```auto
    res = self.output_results()

```

```auto
  File "/var/lib/awx/venv/awx/lib64/python3.9/site-packages/awx/main/utils/profiling.py", line 90, in output_results

```

```auto
    super().output_results()

```

```auto
  File "/var/lib/awx/venv/awx/lib64/python3.9/site-packages/awx/main/utils/profiling.py", line 22, in output_results

```

```auto
    os.makedirs(self.dest)

```

```auto
  File "/usr/lib64/python3.9/os.py", line 215, in makedirs

```

```auto
    makedirs(head, exist_ok=exist_ok)

```

```auto
  File "/usr/lib64/python3.9/os.py", line 225, in makedirs

```

```auto
    mkdir(name, mode)

```

```auto
PermissionError: [Errno 13] Permission denied: '/var/log/tower'

```

```auto
2023-11-16 22:03:02,385 ERROR [c42e021ac51a4f438245248386d68f28] django.request Internal Server Error: /

```

```auto
Traceback (most recent call last):

```

```auto
  File "/var/lib/awx/venv/awx/lib64/python3.9/site-packages/django/core/handlers/exception.py", line 55, in inner

```

```auto
    response = get_response(request)

```

```auto
  File "/var/lib/awx/venv/awx/lib64/python3.9/site-packages/django/utils/deprecation.py", line 136, in __call__

```

```auto
    response = self.process_response(request, response)

```

```auto
  File "/var/lib/awx/venv/awx/lib64/python3.9/site-packages/awx/main/middleware.py", line 58, in process_response

```

```auto
    response['X-API-Profile-File'] = self.prof.stop()

```

```auto
  File "/var/lib/awx/venv/awx/lib64/python3.9/site-packages/awx/main/utils/profiling.py", line 129, in stop

```

```auto
    res = self.output_results()

```

```auto
  File "/var/lib/awx/venv/awx/lib64/python3.9/site-packages/awx/main/utils/profiling.py", line 90, in output_results

```

```auto
    super().output_results()

```

```auto
  File "/var/lib/awx/venv/awx/lib64/python3.9/site-packages/awx/main/utils/profiling.py", line 22, in output_results

```

```auto
    os.makedirs(self.dest)

```

```auto
  File "/usr/lib64/python3.9/os.py", line 215, in makedirs

```

```auto
    makedirs(head, exist_ok=exist_ok)

```

```auto
  File "/usr/lib64/python3.9/os.py", line 225, in makedirs

```

```auto
    mkdir(name, mode)

```

```auto
PermissionError: [Errno 13] Permission denied: '/var/log/tower'

```