# how to configure ingress tls **URL:** \ **Category:** AWX Project\ **Tags:** awx, kubernetes\ **Created:** [October 13, 2022, 12:25pm UTC](https://forum.ansible.com/t/how-to-configure-ingress-tls/37222 "2022-10-13T12:25:39Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![andybourges](https://avatars.discourse-cdn.com/v4/letter/a/a3d4f5/32.png) [@andybourges](https://forum.ansible.com/u/andybourges)\ **Post date:** [October 13, 2022, 12:25pm UTC](https://forum.ansible.com/t/how-to-configure-ingress-tls/37222/1 "2022-10-13T12:25:39Z")
Hi everybody, …I’m a bit confused on how to enable TLS for AWX using ingress. I’m not too familiar with k3s (or k8s) at all and TLS is giving me a hard time now. We’re currently running on k3s using operator v0.28 and corresponding awx 21.5.0. Do I need to set up an ingress controller myself or is this part of the deployment when applying my awx-deploy.yml to k3s? [https://github.com/ansible/awx-operator#network-and-tls-configuration](https://github.com/ansible/awx-operator#network-and-tls-configuration) is mentioning service\_type, ingress\_type and other stuff, but I’m completely unsure what and which combination (and which prerequesites are implied) make sense and would result in giving my https access to awx ?! Maybe someone else has already gone through this valley of tears and can provide me some guidance on how to enable tls for the awx frontend? Thanks, Andreas ---
**Author:** ![Wei-Yen\_Tan](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/wei-yen_tan/32/4111_2.png) [@Wei-Yen\_Tan](https://forum.ansible.com/u/Wei-Yen_Tan)\ **Post date:** [October 13, 2022, 12:28pm UTC](https://forum.ansible.com/t/how-to-configure-ingress-tls/37222/2 "2022-10-13T12:28:04Z")
K3s comes with traefik as an ingress controller. ---
**Author:** ![Wei-Yen\_Tan](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/wei-yen_tan/32/4111_2.png) [@Wei-Yen\_Tan](https://forum.ansible.com/u/Wei-Yen_Tan)\ **Post date:** [October 13, 2022, 12:37pm UTC](https://forum.ansible.com/t/how-to-configure-ingress-tls/37222/3 "2022-10-13T12:37:57Z")
I have gotten awx as a https end point. ---
**Author:** ![andybourges](https://avatars.discourse-cdn.com/v4/letter/a/a3d4f5/32.png) [@andybourges](https://forum.ansible.com/u/andybourges)\ **Post date:** [October 13, 2022, 12:59pm UTC](https://forum.ansible.com/t/how-to-configure-ingress-tls/37222/4 "2022-10-13T12:59:29Z")
Hi, …correct – traefik is running: root@awx-troubleshooting:~# kubectl get pods -A NAMESPACE NAME READY STATUS RESTARTS AGE kube-system helm-install-traefik-crd-q9z56 0/1 Completed 0 8d kube-system helm-install-traefik-9pxl4 0/1 Completed 1 8d kube-system svclb-traefik-84d9f79c-62gkp 2/2 Running 8 (53s ago) 8d kube-system coredns-b96499967-vzbkg 1/1 Running 4 (53s ago) 8d kube-system local-path-provisioner-7b7dc8d6f5-cvwg9 1/1 Running 5 (53s ago) 8d awx awx-postgres-13-0 1/1 Running 1 (52s ago) 7d2h awx awx-95657c866-8jhl2 4/4 Running 4 (52s ago) 7d1h awx awx-operator-controller-manager-7b4dbff7c8-l5x5x 2/2 Running 2 (52s ago) 7d2h **kube-system traefik-7cd4fcff68-z8jxh** 1/1 Running 4 (52s ago) 8d kube-system metrics-server-668d979685-64jsz 1/1 Running 4 (53s ago) 8d From the docs: “The following variables are customizable when **ingress\_type=ingress**. The ingress type creates an Ingress resource as documented which can be shared with many other Ingress Controllers as listed.” So I’ll set ingress\_type to ingress and I would use clusterIP as service\_type, right? Thanks, Andreas ---
**Author:** ![andybourges](https://avatars.discourse-cdn.com/v4/letter/a/a3d4f5/32.png) [@andybourges](https://forum.ansible.com/u/andybourges)\ **Post date:** [October 13, 2022, 3:50pm UTC](https://forum.ansible.com/t/how-to-configure-ingress-tls/37222/5 "2022-10-13T15:50:54Z")
Hi, after some more fiddling with my awx-deploy.yml, I got it up and running now. Thanks, Andreas