# awx on aks cluster and satellite sync

**URL:** <https://forum.ansible.com/t/awx-on-aks-cluster-and-satellite-sync/37601>\
**Category:** AWX Project\
**Tags:** awx, kubernetes\
**Created:** [February 1, 2023, 11:52am UTC](https://forum.ansible.com/t/awx-on-aks-cluster-and-satellite-sync/37601 "2023-02-01T11:52:29Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sevket\_Avci](https://avatars.discourse-cdn.com/v4/letter/s/ee7513/32.png) [@Sevket\_Avci](https://forum.ansible.com/u/Sevket_Avci)\
**Post date:** [February 1, 2023, 11:52am UTC](https://forum.ansible.com/t/awx-on-aks-cluster-and-satellite-sync/37601/1 "2023-02-01T11:52:29Z")

</div>

Hi everybody,

does anyone have a setup on a managed kubernetes (aks) running a sync between awx and satellite? Although we have custom-ca-bundle active we are getting error messages:

loading collection theforeman.foreman from /usr/share/ansible/collections/ansible\_collections/theforeman/foreman

**[WARNING]: \* Failed to parse /runner/inventory/foreman.yml with auto plugin:**

**HTTPSConnectionPool(host=‘xxxxxxx’, port=443): Max retries**

**exceeded with url: /api/v2/status?page=1&per\_page=250 (Caused by**

**SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE\_VERIFY\_FAILED]**

**certificate verify failed: self signed certificate in certificate chain**

**(\_ssl.c:1131)')))**

Best Regards  
Sevket

---

<div class="post-metadata">

**Author:** ![AWX\_Project](https://avatars.discourse-cdn.com/v4/letter/a/eada6e/32.png) [@AWX\_Project](https://forum.ansible.com/u/AWX_Project)\
**Post date:** [February 2, 2023, 2:37am UTC](https://forum.ansible.com/t/awx-on-aks-cluster-and-satellite-sync/37601/2 "2023-02-02T02:37:19Z")

</div>

“custom-ca-bundle active”

how did you specify this exactly, using the ‘bundle-ca-secret’ or something else?

You might get around this by baking the ca bundle (and activating them by adding to trust store) in the execution environment image itself

AWX Team

---

<div class="post-metadata">

**Author:** ![Sevket\_Avci](https://avatars.discourse-cdn.com/v4/letter/s/ee7513/32.png) [@Sevket\_Avci](https://forum.ansible.com/u/Sevket_Avci)\
**Post date:** [February 3, 2023, 7:05am UTC](https://forum.ansible.com/t/awx-on-aks-cluster-and-satellite-sync/37601/3 "2023-02-03T07:05:22Z")

</div>

Thanks for the reply. Yes we added it to the bundle-ca-secret. How can we achieve your suggestion. Do we have to create our own ee image?  
Best Regards  
Sevket

---

<div class="post-metadata">

**Author:** ![AWX\_Project](https://avatars.discourse-cdn.com/v4/letter/a/eada6e/32.png) [@AWX\_Project](https://forum.ansible.com/u/AWX_Project)\
**Post date:** [February 3, 2023, 6:18pm UTC](https://forum.ansible.com/t/awx-on-aks-cluster-and-satellite-sync/37601/4 "2023-02-03T18:18:07Z")

</div>

Yeah you can use ansible-builder tool to create your own execution environment image.

see the official docs here [https://ansible-builder.readthedocs.io/en/stable/](https://ansible-builder.readthedocs.io/en/stable/)

and a nice blog post here [https://www.linkedin.com/pulse/creating-custom-ee-awx-phil-griffiths/](https://www.linkedin.com/pulse/creating-custom-ee-awx-phil-griffiths/)

Once you build the image, upload to a image repository like quay, and then create an EE in the AWX UI pointing to that image (be mindful of credentials if hosted on a private repo)

AWX Team