# How to access AWX web interface on K8s **URL:** \ **Category:** AWX Project\ **Tags:** awx, kubernetes\ **Created:** [January 22, 2019, 2:28pm UTC](https://forum.ansible.com/t/how-to-access-awx-web-interface-on-k8s/29491 "2019-01-22T14:28:45Z")\ **Posts on this page:** 14\ **Page:** 1
**Author:** ![Darkhan](https://avatars.discourse-cdn.com/v4/letter/d/34f0e0/32.png) [@Darkhan](https://forum.ansible.com/u/Darkhan)\ **Post date:** [January 22, 2019, 2:28pm UTC](https://forum.ansible.com/t/how-to-access-awx-web-interface-on-k8s/29491/1 "2019-01-22T14:28:45Z")
I have deployed AWX on K8s. Everything is green. I have the service and ingress below which were created by the install playbook. How do I access the web interface? I am not very familiar with K8s but since I do not see any external endpoints defined, I guess that’s the issue. Ingress: { “kind”: “Ingress”, “apiVersion”: “extensions/v1beta1”, “metadata”: { “name”: “awx-web-svc”, “namespace”: “awx”, “selfLink”: “/apis/extensions/v1beta1/namespaces/awx/ingresses/awx-web-svc”, “uid”: “8cfcae6c-1e40-11e9-986d-001dd8b736ad”, “resourceVersion”: “82353”, “generation”: 1, “creationTimestamp”: “2019-01-22T12:23:40Z”, “annotations”: { “[kubectl.kubernetes.io/last-applied-configuration](http://kubectl.kubernetes.io/last-applied-configuration)”: “{"apiVersion":"extensions/v1beta1","kind":"Ingress","metadata":{"annotations":{},"name":"awx-web-svc","namespace":"awx"},"spec":{"backend":{"serviceName":"awx-web-svc","servicePort":80}}}\n” } }, “spec”: { “backend”: { “serviceName”: “awx-web-svc”, “servicePort”: 80 } }, “status”: { “loadBalancer”: {} } } Service: { “kind”: “Service”, “apiVersion”: “v1”, “metadata”: { “name”: “awx-web-svc”, “namespace”: “awx”, “selfLink”: “/api/v1/namespaces/awx/services/awx-web-svc”, “uid”: “8cf4a886-1e40-11e9-986d-001dd8b736ad”, “resourceVersion”: “82346”, “creationTimestamp”: “2019-01-22T12:23:40Z”, “labels”: { “name”: “awx-web-svc” }, “annotations”: { “[kubectl.kubernetes.io/last-applied-configuration](http://kubectl.kubernetes.io/last-applied-configuration)”: “{"apiVersion":"v1","kind":"Service","metadata":{"annotations":{},"labels":{"name":"awx-web-svc"},"name":"awx-web-svc","namespace":"awx"},"spec":{"ports":[{"name":"http","port":80,"targetPort":8052}],"selector":{"name":"awx-web-deploy"},"type":"NodePort"}}\n” } }, “spec”: { “ports”: [ { “name”: “http”, “protocol”: “TCP”, “port”: 80, “targetPort”: 8052, “nodePort”: 32448 } ], “selector”: { “name”: “awx-web-deploy” }, “clusterIP”: “10.98.124.157”, “type”: “NodePort”, “sessionAffinity”: “None”, “externalTrafficPolicy”: “Cluster” }, “status”: { “loadBalancer”: {} } } ---
**Author:** ![Darkhan](https://avatars.discourse-cdn.com/v4/letter/d/34f0e0/32.png) [@Darkhan](https://forum.ansible.com/u/Darkhan)\ **Post date:** [January 22, 2019, 2:39pm UTC](https://forum.ansible.com/t/how-to-access-awx-web-interface-on-k8s/29491/2 "2019-01-22T14:39:15Z")
If i start the proxy and try [http://localhost:8001/api/v1/namespaces/awx/services/http:awx-web-svc:80/proxy/#/login](http://localhost:8001/api/v1/namespaces/awx/services/http:awx-web-svc:80/proxy/#/login) the interface seems to load then throws and error: Failed to read /api. GET status: undefined ---
**Author:** ![matburt](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/matburt/32/3612_2.png) [@matburt](https://forum.ansible.com/u/matburt)\ **Post date:** [January 22, 2019, 2:40pm UTC](https://forum.ansible.com/t/how-to-access-awx-web-interface-on-k8s/29491/3 "2019-01-22T14:40:10Z")
You have nodeport configured, though the selector is on the deploy container (nodeport 32448) ---
**Author:** ![Darkhan](https://avatars.discourse-cdn.com/v4/letter/d/34f0e0/32.png) [@Darkhan](https://forum.ansible.com/u/Darkhan)\ **Post date:** [January 22, 2019, 3:32pm UTC](https://forum.ansible.com/t/how-to-access-awx-web-interface-on-k8s/29491/4 "2019-01-22T15:32:01Z")
Was I supposed to configure something else before installation? I did all the kubernetes configs that were mentioned on the install guide on github, so if that selector is wrong then something is wrong with the installer. As mentioned earlier, if I try through the proxy with [http://localhost:8001/api/v1/namespaces/awx/services/http:awx-web-svc:80/proxy/#/login](http://localhost:8001/api/v1/namespaces/awx/services/http:awx-web-svc:80/proxy/#/login), the awx logo shows in the chrome tab and the title of the tab is changed to Ansible-AWX so it looks like it tries to load it, but fails with error: Failed to read /api. GET status: undefined awx-web logs show only 200s. Is there a problem with the installation or am I connecting wrong? ---
**Author:** ![matburt](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/matburt/32/3612_2.png) [@matburt](https://forum.ansible.com/u/matburt)\ **Post date:** [January 22, 2019, 4:01pm UTC](https://forum.ansible.com/t/how-to-access-awx-web-interface-on-k8s/29491/5 "2019-01-22T16:01:54Z")
Depending on what provider you are using for AWX you should be able to see what the ingress knows about the route to the service here as shown here: [https://github.com/ansible/awx/blob/devel/INSTALL.md#accessing-awx-1](https://github.com/ansible/awx/blob/devel/INSTALL.md#accessing-awx-1) Where/how did you install kubernetes? ---
**Author:** ![Darkhan](https://avatars.discourse-cdn.com/v4/letter/d/34f0e0/32.png) [@Darkhan](https://forum.ansible.com/u/Darkhan)\ **Post date:** [January 22, 2019, 4:17pm UTC](https://forum.ansible.com/t/how-to-access-awx-web-interface-on-k8s/29491/6 "2019-01-22T16:17:09Z")
Not using any cloud provider. On-premise private cloud. I checked that before and it’s not picking up any address. kubectl get svc --namespace awx NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE awx-rmq-mgmt ClusterIP 10.101.80.192 15672/TCP 3h44m awx-web-svc NodePort 10.98.124.157 80:32448/TCP 3h44m rabbitmq NodePort 10.106.172.116 15672:30304/TCP,5672:31305/TCP 3h44m kubectl get ing --namespace awx NAME HOSTS ADDRESS PORTS AGE awx-web-svc \* 80 3h40m Is it because i need to configure an ingress controller of my own? I do not have any installed. That would make it accessible externally, but either way, it should work without the controller through the proxy, right? In the same way I’m accessing the k8s dashboard (which works fine): [http://localhost:8001/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/](http://localhost:8001/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/) ---
**Author:** ![matburt](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/matburt/32/3612_2.png) [@matburt](https://forum.ansible.com/u/matburt)\ **Post date:** [January 22, 2019, 4:25pm UTC](https://forum.ansible.com/t/how-to-access-awx-web-interface-on-k8s/29491/7 "2019-01-22T16:25:06Z")
You’ll need to manage allocating address for the ingress controller on your own then, there are a lot of resources out there available for you to learn how this part of Kubernetes works. You _do_ have the services exposed on a NodePort which you should be able to access externally ---
**Author:** ![Uriel](https://avatars.discourse-cdn.com/v4/letter/u/53a042/32.png) [@Uriel](https://forum.ansible.com/u/Uriel)\ **Post date:** [January 22, 2019, 5:24pm UTC](https://forum.ansible.com/t/how-to-access-awx-web-interface-on-k8s/29491/8 "2019-01-22T17:24:26Z")
Not a long term solution but if you want confirmation that you’re on the right path you should be able to test your connection directly to the service and verify AWX is up: - Get the node name where the AWX pod is running - kubectl get pod awx-pod-name -o jsonpath=‘{.spec.nodeName}’- Get the port where the awx-web service is listening - kubectl get service awx-web-svc -o jsonpath=‘{.spec.ports[0].nodePort}’- Connect to the nodename:serviceport in a browser PS. Maybe you need to provide the ingress spec a hostname? ---
**Author:** ![matburt](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/matburt/32/3612_2.png) [@matburt](https://forum.ansible.com/u/matburt)\ **Post date:** [January 22, 2019, 5:31pm UTC](https://forum.ansible.com/t/how-to-access-awx-web-interface-on-k8s/29491/9 "2019-01-22T17:31:39Z")
FWIW, NodePort will expose that port on _all_ Kubernetes nodes on the displayed port … you don’t have to specifically connect to the node running the service: [https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types](https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types) ---
**Author:** ![Darkhan](https://avatars.discourse-cdn.com/v4/letter/d/34f0e0/32.png) [@Darkhan](https://forum.ansible.com/u/Darkhan)\ **Post date:** [January 24, 2019, 12:35pm UTC](https://forum.ansible.com/t/how-to-access-awx-web-interface-on-k8s/29491/10 "2019-01-24T12:35:29Z")
Yes, now this works. I can access it on hostname:32448 but I need to figure out how to expose it on 80 since the end users won’t be able to connect to 32448 due to FW. ---
**Author:** ![matburt](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/matburt/32/3612_2.png) [@matburt](https://forum.ansible.com/u/matburt)\ **Post date:** [January 24, 2019, 3:05pm UTC](https://forum.ansible.com/t/how-to-access-awx-web-interface-on-k8s/29491/11 "2019-01-24T15:05:04Z")
Use a load balancer in front of this, I’d also strongly recommend https vs http ---
**Author:** ![Darkhan](https://avatars.discourse-cdn.com/v4/letter/d/34f0e0/32.png) [@Darkhan](https://forum.ansible.com/u/Darkhan)\ **Post date:** [January 25, 2019, 12:16pm UTC](https://forum.ansible.com/t/how-to-access-awx-web-interface-on-k8s/29491/12 "2019-01-25T12:16:09Z")
Is there any particular reason why you recommend https? I am exposing this as an internal tool only, behind an enterprise-grade firewall. For the load balancer thing, wouldn’t it be better to use a load-balancer type of service instead of going for ingress-controller? ---
**Author:** ![matburt](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/matburt/32/3612_2.png) [@matburt](https://forum.ansible.com/u/matburt)\ **Post date:** [January 28, 2019, 4:44pm UTC](https://forum.ansible.com/t/how-to-access-awx-web-interface-on-k8s/29491/13 "2019-01-28T16:44:50Z")
I think we’ll see, as time goes on, more and more browsers respond natively or drop direct support for insecure connections. It’s just good practice to get into generally. As far as bridging connectins between the service and your external users via something like LoadBalancer. That’s fine, but LoadBalancer generally requires something provided by your Cloud provider and it sounds like you might not be using a cloud provider to expose the services? This is why I like OpenShift as a solution a bit better because it has a concept of a Route built in, but Kubernetes will require you to bring some more detail about the system it’s running on in order to wire into its Ingress interface. ---
**Author:** ![Ajitkumar\_Tanwade](https://avatars.discourse-cdn.com/v4/letter/a/bbce88/32.png) [@Ajitkumar\_Tanwade](https://forum.ansible.com/u/Ajitkumar_Tanwade)\ **Post date:** [March 24, 2020, 6:44am UTC](https://forum.ansible.com/t/how-to-access-awx-web-interface-on-k8s/29491/14 "2020-03-24T06:44:27Z")
Hi All, Hope you are doing well We are also facing the same issue on K8S. There is no address assigned to Ingress service. We are planning to run multiple AWX pods, may I know how should we enable the load balancer and ingress service for https access? Regards, Ajit