# AWX/k8s - SSL certificate problem: unable to get local issuer certificate"

**URL:** <https://forum.ansible.com/t/awx-k8s-ssl-certificate-problem-unable-to-get-local-issuer-certificate/37234>\
**Category:** AWX Project\
**Tags:** awx, kubernetes\
**Created:** [October 16, 2022, 7:31am UTC](https://forum.ansible.com/t/awx-k8s-ssl-certificate-problem-unable-to-get-local-issuer-certificate/37234 "2022-10-16T07:31:19Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Anthony\_Macle](https://avatars.discourse-cdn.com/v4/letter/a/22d042/32.png) [@Anthony\_Macle](https://forum.ansible.com/u/Anthony_Macle)\
**Post date:** [October 16, 2022, 7:31am UTC](https://forum.ansible.com/t/awx-k8s-ssl-certificate-problem-unable-to-get-local-issuer-certificate/37234/1 "2022-10-16T07:31:19Z")

</div>

I installed awx on minikube following the official documentation :[https://github.com/ansible/awx-operator](https://github.com/ansible/awx-operator)

I have created the bundle certificate following the documentation, I added it to my awx.yaml (kind: awx) under “spec”.

I made sure the secret was generetaed inside the awx namespace.

kubectl create secret generic -custom-certs  
–from-file=bundle-ca.crt=\<PATH/TO/YOUR/CA/PEM/FILE\>

\*\*\* Take note here, it says The certificate should be PEM type, \*\*\*

One thing I don’t get tho, I created the secret from the “bundle-ca.crt” located on my gitlab server, however the documentation states that the file should be .PEM  
Why should I need a PEM if I already have the bundle-ca.crt available ???

Even after adding the certificate, I am still unable to synchronize my git project.

My GitLab server is on the local network, however I am not willing to disable ssl check. I would like to fix this the clean way.