# How to configure custom cabundle for exisging awx under kubernetes

**URL:** <https://forum.ansible.com/t/how-to-configure-custom-cabundle-for-exisging-awx-under-kubernetes/37523>\
**Category:** AWX Project\
**Tags:** awx, kubernetes\
**Created:** [January 5, 2023, 6:35am UTC](https://forum.ansible.com/t/how-to-configure-custom-cabundle-for-exisging-awx-under-kubernetes/37523 "2023-01-05T06:35:28Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Selvam\_Elangovan](https://avatars.discourse-cdn.com/v4/letter/s/8c91f0/32.png) [@Selvam\_Elangovan](https://forum.ansible.com/u/Selvam_Elangovan)\
**Post date:** [January 5, 2023, 6:35am UTC](https://forum.ansible.com/t/how-to-configure-custom-cabundle-for-exisging-awx-under-kubernetes/37523/1 "2023-01-05T06:35:28Z")

</div>

Hi!  
I plan to configure existing awx 21.x to use custom-ca-bundle. I followed the instruction in github: [https://github.com/ansible/awx-operator/issues/376](https://github.com/ansible/awx-operator/issues/376) however it is not working for me. could some one help me here.

Steps followed:  
created the secret named awx-ssl-ca-custom  
modified the awx.yaml file to have the space contains above awx-ssl-ca-custom  
bundle\_cacert\_secret: awx-ssl-ca-custom  
then ran the kubectl -n awx replace -f awx.yaml

after the above step it is not triggering operator deployment, I had to do it manually however still the cert is not populated under /etc/pk of each container.

Kindly advice.  
Thanks.

---

<div class="post-metadata">

**Author:** ![Selvam\_Elangovan](https://avatars.discourse-cdn.com/v4/letter/s/8c91f0/32.png) [@Selvam\_Elangovan](https://forum.ansible.com/u/Selvam_Elangovan)\
**Post date:** [January 6, 2023, 5:54am UTC](https://forum.ansible.com/t/how-to-configure-custom-cabundle-for-exisging-awx-under-kubernetes/37523/2 "2023-01-06T05:54:00Z")

</div>

could some one help me here. Thanks.

---

<div class="post-metadata">

**Author:** ![AWX\_Project](https://avatars.discourse-cdn.com/v4/letter/a/eada6e/32.png) [@AWX\_Project](https://forum.ansible.com/u/AWX_Project)\
**Post date:** [January 6, 2023, 6:19pm UTC](https://forum.ansible.com/t/how-to-configure-custom-cabundle-for-exisging-awx-under-kubernetes/37523/3 "2023-01-06T18:19:25Z")

</div>

Hello!

Could you provide the output of your `kubectl -n awx replace -f awx.yaml` command? Does the command itself complete successfully?

Can you include the awx.yaml file (removing any sensitive information, as needed)? This will better help us understand what is happening.

Thanks!  
AWX Team

---

<div class="post-metadata">

**Author:** ![Selvam\_Elangovan](https://avatars.discourse-cdn.com/v4/letter/s/8c91f0/32.png) [@Selvam\_Elangovan](https://forum.ansible.com/u/Selvam_Elangovan)\
**Post date:** [January 9, 2023, 2:57pm UTC](https://forum.ansible.com/t/how-to-configure-custom-cabundle-for-exisging-awx-under-kubernetes/37523/4 "2023-01-09T14:57:50Z")

</div>

Thanks.

I got below.  
awx/awx replaced. no error however the pods are not re-created.

kind: awx  
metadata:  
name: awx  
namespace: awx

spec:  
bundle\_cacert\_secret: file\_name

---

<div class="post-metadata">

**Author:** ![AWX\_Project](https://avatars.discourse-cdn.com/v4/letter/a/eada6e/32.png) [@AWX\_Project](https://forum.ansible.com/u/AWX_Project)\
**Post date:** [January 11, 2023, 8:07pm UTC](https://forum.ansible.com/t/how-to-configure-custom-cabundle-for-exisging-awx-under-kubernetes/37523/5 "2023-01-11T20:07:49Z")

</div>

Hi there,  
I think kubeclt edit or kubectl patch would be better for what you’re doing here.  
I’m not fully sure why your pods aren’t coming up but if you use replace you need to provide the full spec, not just the specific thing you want changed.  
This might help you out: [https://kubernetes.io/docs/reference/generated/kubectl/kubectl-commands#replace](https://kubernetes.io/docs/reference/generated/kubectl/kubectl-commands#replace)  
We would be curious if this fixes your issue or not, because we can’t seem to do a reproduction on our end here.  
Thanks,  
AWX Team

---

<div class="post-metadata">

**Author:** ![Selvam\_Elangovan](https://avatars.discourse-cdn.com/v4/letter/s/8c91f0/32.png) [@Selvam\_Elangovan](https://forum.ansible.com/u/Selvam_Elangovan)\
**Post date:** [February 8, 2023, 6:59am UTC](https://forum.ansible.com/t/how-to-configure-custom-cabundle-for-exisging-awx-under-kubernetes/37523/6 "2023-02-08T06:59:11Z")

</div>

Could you please help us here

---

<div class="post-metadata">

**Author:** ![AWX\_Project](https://avatars.discourse-cdn.com/v4/letter/a/eada6e/32.png) [@AWX\_Project](https://forum.ansible.com/u/AWX_Project)\
**Post date:** [February 10, 2023, 6:16pm UTC](https://forum.ansible.com/t/how-to-configure-custom-cabundle-for-exisging-awx-under-kubernetes/37523/7 "2023-02-10T18:16:08Z")

</div>

Were you able to try the last suggestion? If so, could you please provide us with the errors/output of this?

Thanks,

AWX Team
