# AWX + Minikube+/etc/tower/settings.py  edit (ro)

**URL:** <https://forum.ansible.com/t/awx-minikube-etc-tower-settings-py-edit-ro/36023>\
**Category:** AWX Project\
**Tags:** awx\
**Created:** [November 22, 2021, 12:35pm UTC](https://forum.ansible.com/t/awx-minikube-etc-tower-settings-py-edit-ro/36023 "2021-11-22T12:35:53Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![The\_Vandyy\_Vines](https://avatars.discourse-cdn.com/v4/letter/t/7993a0/32.png) [@The\_Vandyy\_Vines](https://forum.ansible.com/u/The_Vandyy_Vines)\
**Post date:** [November 22, 2021, 12:35pm UTC](https://forum.ansible.com/t/awx-minikube-etc-tower-settings-py-edit-ro/36023/1 "2021-11-22T12:35:53Z")

</div>

How to change awx’s CSRF to false?

I know it’s in **/etc/tower/settings.py**  **.**

The default directory is **/var/lib/awx/projects** , and I want to change this to a different directory.

However, there is an issue because I installed it with kubernates like the guide following.

**[https://github.com/ansible/awx/blob/devel/INSTALL.md](https://github.com/ansible/awx/blob/devel/INSTALL.md)**

Even though I enter the container with root privileges, I can not edit **settings.py** because **settings.py** is READ ONLY.

When I see **kubectl describe pod** , I guess it is because the following files are mounted.

**/etc/tower/settings.py from awx-settings (ro,path=“settings.py”)**

Is there any other way? Please help me solve it.

---

<div class="post-metadata">

**Author:** ![The\_Vandyy\_Vines](https://avatars.discourse-cdn.com/v4/letter/t/7993a0/32.png) [@The\_Vandyy\_Vines](https://forum.ansible.com/u/The_Vandyy_Vines)\
**Post date:** [November 30, 2021, 8:00pm UTC](https://forum.ansible.com/t/awx-minikube-etc-tower-settings-py-edit-ro/36023/2 "2021-11-30T20:00:37Z")

</div>

i have used configmap with changes and mounted the same in .

---

<div class="post-metadata">

**Author:** ![The\_Vandyy\_Vines](https://avatars.discourse-cdn.com/v4/letter/t/7993a0/32.png) [@The\_Vandyy\_Vines](https://forum.ansible.com/u/The_Vandyy_Vines)\
**Post date:** [December 7, 2021, 12:20pm UTC](https://forum.ansible.com/t/awx-minikube-etc-tower-settings-py-edit-ro/36023/3 "2021-12-07T12:20:01Z")

</div>

Hello Experts.  
I managed to add the CSRF token as httponly in setting.py file , But the flag ( httponly) is still off for cookies CSRF userloggedin and currentuser token.

there is no httponly flag set in config js file .

Can anyone help.

Just need to make the httponly flag up for 3 cookies(CSRF userloggedin and currentuser token) in AWX 19.4

Thanks in advance 🙂

---

<div class="post-metadata">

**Author:** ![The\_Vandyy\_Vines](https://avatars.discourse-cdn.com/v4/letter/t/7993a0/32.png) [@The\_Vandyy\_Vines](https://forum.ansible.com/u/The_Vandyy_Vines)\
**Post date:** [December 17, 2021, 10:45am UTC](https://forum.ansible.com/t/awx-minikube-etc-tower-settings-py-edit-ro/36023/4 "2021-12-17T10:45:37Z")

</div>

Issue raised.  
[https://github.com/ansible/awx/issues/11479](https://github.com/ansible/awx/issues/11479)