# CA Certificate for LDAP SSL/TLS communication

**URL:** <https://forum.ansible.com/t/ca-certificate-for-ldap-ssl-tls-communication/34464>\
**Category:** AWX Project\
**Tags:** awx, kubernetes\
**Created:** [January 18, 2021, 9:11pm UTC](https://forum.ansible.com/t/ca-certificate-for-ldap-ssl-tls-communication/34464 "2021-01-18T21:11:33Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Cnu\_k](https://avatars.discourse-cdn.com/v4/letter/c/a88e4f/32.png) [@Cnu\_k](https://forum.ansible.com/u/Cnu_k)\
**Post date:** [January 18, 2021, 9:11pm UTC](https://forum.ansible.com/t/ca-certificate-for-ldap-ssl-tls-communication/34464/1 "2021-01-18T21:11:33Z")

</div>

Hi,

I am using latest AWX version(16.0.0) in Kubernetes cluster and trying to understand how I can supply our internal CA Certificate awx\_web and awx\_task containers for this work. I need to do this for configuring LDAP authentication for AWX and also for running Ansible tasks later.

Can anyone tell me if I need to copy the .pem file to the docker image or reference those files in the inventory file, for Ansible playbook tasks to copy to respective containers at correct locations?

Thanks

---

<div class="post-metadata">

**Author:** ![Ronan](https://avatars.discourse-cdn.com/v4/letter/r/3ec8ea/32.png) [@Ronan](https://forum.ansible.com/u/Ronan)\
**Post date:** [January 21, 2021, 4:08pm UTC](https://forum.ansible.com/t/ca-certificate-for-ldap-ssl-tls-communication/34464/2 "2021-01-21T16:08:21Z")

</div>

Hi,

I guess you’ll have to setup the ca\_trust\_dir variables when installing AWX.

# CA Trust directory. If you need to provide custom CA certificates, supplying

# this variable causes this directory on the host to be bind mounted over

# /etc/pki/ca-trust in the awx\_task and awx\_web containers.

# If you are deploying on openshift or kubernetes, set the variable to /etc/pki/ca-trust instead,

# as the awx\_web and awx\_task containers will not run the `update-ca-trust` command.

#ca\_trust\_dir=/etc/pki/ca-trust/source/anchors

In my case (docker) I’ve used that with LDAPS successfully but it seems the k8s config is different.

Hope it helps.

---

<div class="post-metadata">

**Author:** ![Cnu\_k](https://avatars.discourse-cdn.com/v4/letter/c/a88e4f/32.png) [@Cnu\_k](https://forum.ansible.com/u/Cnu_k)\
**Post date:** [January 21, 2021, 6:55pm UTC](https://forum.ansible.com/t/ca-certificate-for-ldap-ssl-tls-communication/34464/3 "2021-01-21T18:55:27Z")

</div>

Above approach didn’t work for some reason as I was getting mounting error for the container in Kubernetes cluster.  
Solved the issue as discussed here. [https://groups.google.com/g/awx-project/c/p4sKMYJr6gk](https://groups.google.com/g/awx-project/c/p4sKMYJr6gk)