# HTTP to HTTPS Redirect with ORG. SSL Certs

**URL:** <https://forum.ansible.com/t/http-to-https-redirect-with-org-ssl-certs/4576>\
**Category:** Get Help\
**Tags:** kubernetes, awx\
**Created:** [March 26, 2024, 1:20pm UTC](https://forum.ansible.com/t/http-to-https-redirect-with-org-ssl-certs/4576 "2024-03-26T13:20:10Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![fahadshery](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/fahadshery/32/2692_2.png) [@fahadshery](https://forum.ansible.com/u/fahadshery)\
**Post date:** [March 26, 2024, 1:20pm UTC](https://forum.ansible.com/t/http-to-https-redirect-with-org-ssl-certs/4576/1 "2024-03-26T13:20:10Z")

</div>

Hi,

I have the deployed the `AWX` on `K3S` using the following `kustomize.yaml`:

```auto
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
  # Find the latest tag here: https://github.com/ansible/awx-operator/releases
  - github.com/ansible/awx-operator/config/default?ref=2.13.1
  - awx.yaml

# Set the image tags to match the git version from above
images:
  - name: quay.io/ansible/awx-operator
    newTag: 2.13.1

# Specify a custom namespace in which to install AWX
namespace: awx

```

And my `awx.yml` is:

```auto
---
apiVersion: awx.ansible.com/v1beta1
kind: AWX
metadata:
  name: awx
spec:
  ipv6_disabled: true
  service_type: nodeport
  nodeport_port: 30080

```

How do I redirect traffic to HTTPS? Do I need a separate `nodeport`? where do I store the `SSL Certs` for it to find?

Thanks

---

<div class="post-metadata">

**Author:** ![fahadshery](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/fahadshery/32/2692_2.png) [@fahadshery](https://forum.ansible.com/u/fahadshery)\
**Post date:** [March 27, 2024, 11:10am UTC](https://forum.ansible.com/t/http-to-https-redirect-with-org-ssl-certs/4576/2 "2024-03-27T11:10:23Z")

</div>

no one did this before? 😮

---

<div class="post-metadata">

**Author:** ![Dustin](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/dustin/32/2573_2.png) [@Dustin](https://forum.ansible.com/u/Dustin)\
**Post date:** [March 27, 2024, 2:05pm UTC](https://forum.ansible.com/t/http-to-https-redirect-with-org-ssl-certs/4576/3 "2024-03-27T14:05:03Z")

</div>

@kurokobo has an excellent write up here:  
[https://github.com/kurokobo/awx-on-k3s](https://github.com/kurokobo/awx-on-k3s)

High level steps:

1. Get your Certificate and Private Key for the hostname you want to use
2. Create a kubtectl tls secret
3. Update your kustomize files to include the secret

I’m not available to pull my config at the moment to give you a specific example.

---

<div class="post-metadata">

**Author:** ![fahadshery](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/fahadshery/32/2692_2.png) [@fahadshery](https://forum.ansible.com/u/fahadshery)\
**Post date:** [April 3, 2024, 11:45pm UTC](https://forum.ansible.com/t/http-to-https-redirect-with-org-ssl-certs/4576/4 "2024-04-03T23:45:14Z")

</div>

I ended up using this guide:

[https://github.com/kurokobo/awx-on-k3s](https://github.com/kurokobo/awx-on-k3s)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/ansible/original/1X/1882d9a01da5d8996a862359b0913cc568a39b84.svg) [@system](https://forum.ansible.com/u/system)\
**Post date:** [May 3, 2024, 11:45pm UTC](https://forum.ansible.com/t/http-to-https-redirect-with-org-ssl-certs/4576/5 "2024-05-03T23:45:46Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
