# Questions about notifications in AWX 24.6.1 **URL:** \ **Category:** Get Help\ **Tags:** awx, ee\ **Created:** [October 9, 2025, 9:36am UTC](https://forum.ansible.com/t/questions-about-notifications-in-awx-24-6-1/44648 "2025-10-09T09:36:17Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![ildjarn](https://avatars.discourse-cdn.com/v4/letter/i/8491ac/32.png) [@ildjarn](https://forum.ansible.com/u/ildjarn)\ **Post date:** [October 9, 2025, 9:36am UTC](https://forum.ansible.com/t/questions-about-notifications-in-awx-24-6-1/44648/1 "2025-10-09T09:36:17Z")
I have a few questions about notifications in AWX 24.6.1 - How can I debug failed notifications? Which log do I need to check? - I have a playbook that runs on EE ‘MyCompanyEE’, which can connect succesfully to website [https://my.server/](https://my.server/). But if I set this URL in an AWX webhook notification, I need to disable certificate checking. I already set the global default EE in the miscellanous system settings to ‘MyCompanyEE’ but the error remains. So what component in AWX runs the notifications, and how can I insert the root CA (which is apparently absent from that component)? The root CA in question is ‘CN = Sectigo Public Server Authentication Root R46’ ---
**Author:** ![Narizz28](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/narizz28/32/9476_2.png) [@Narizz28](https://forum.ansible.com/u/Narizz28)\ **Post date:** [October 9, 2025, 8:43pm UTC](https://forum.ansible.com/t/questions-about-notifications-in-awx-24-6-1/44648/2 "2025-10-09T20:43:57Z")
I’m a little lost, are you saying you want to send a notification to your Execution Environment? What on the EE is going to accept it? For example, if you want to send a JSON payload to the EE host over HTTP/S, you can set the notification type to Webhook, which would then give you the option to “Disable SSL verification”. ---
**Author:** ![ildjarn](https://avatars.discourse-cdn.com/v4/letter/i/8491ac/32.png) [@ildjarn](https://forum.ansible.com/u/ildjarn)\ **Post date:** [October 10, 2025, 7:10am UTC](https://forum.ansible.com/t/questions-about-notifications-in-awx-24-6-1/44648/3 "2025-10-10T07:10:14Z")
You can define notifications in AWX to run when a job finishes. I have a notification that creates a ticket in our ticketing system when a job fails, using a webhook POST. The team responsible for the ticketing system replaced the https-certificate, and suddenly no new tickets were created. Apparently it uses a root CA that is not present in the CA store of whatever AWX component is responsible for running notifications. So at the moment, for a quick fix, I turned ‘Disable SSL verification’ on on the notification, but I would like to know - what component is responsible for these notifications? - How do I inject the new root CA into that component’s root CA list? ---
**Author:** ![anon81884396](https://avatars.discourse-cdn.com/v4/letter/a/b782af/32.png) [@anon81884396](https://forum.ansible.com/u/anon81884396)\ **Post date:** [October 10, 2025, 12:20pm UTC](https://forum.ansible.com/t/questions-about-notifications-in-awx-24-6-1/44648/4 "2025-10-10T12:20:29Z")
I believe what you may be after is bundle\_cacert\_secret, a parameter you can set on the AWX custom resource definition. > **[Trusting a Custom Certificate Authority - Ansible AWX Operator Documentation](https://ansible.readthedocs.io/projects/awx-operator/en/latest/user-guide/advanced-configuration/trusting-a-custom-certificate-authority.html)** > I believe this dictates what CAs AWX itself trusts. Since notifications don’t use an EE, I assume they run their operations directly from one of the AWX containers. ---
**Author:** ![ildjarn](https://avatars.discourse-cdn.com/v4/letter/i/8491ac/32.png) [@ildjarn](https://forum.ansible.com/u/ildjarn)\ **Post date:** [October 10, 2025, 1:26pm UTC](https://forum.ansible.com/t/questions-about-notifications-in-awx-24-6-1/44648/5 "2025-10-10T13:26:10Z")
Do I need to get the current root CA list from somewhere and add the Sectigo one to that list, or do I create a CA bundle with only the Sectigo certificate and AWX will add it to the existing list itself? ---
**Author:** ![anon81884396](https://avatars.discourse-cdn.com/v4/letter/a/b782af/32.png) [@anon81884396](https://forum.ansible.com/u/anon81884396)\ **Post date:** [October 10, 2025, 3:17pm UTC](https://forum.ansible.com/t/questions-about-notifications-in-awx-24-6-1/44648/6 "2025-10-10T15:17:57Z")
Dunno, the latter makes more sense as the list of CAs in the world is huge and I imagine the most sensible design for AWX to use would be to add the CAs in the secret in addition to its pre-existing ones. Best to test first though. ---
**Author:** ![ildjarn](https://avatars.discourse-cdn.com/v4/letter/i/8491ac/32.png) [@ildjarn](https://forum.ansible.com/u/ildjarn)\ **Post date:** [October 13, 2025, 11:41am UTC](https://forum.ansible.com/t/questions-about-notifications-in-awx-24-6-1/44648/7 "2025-10-13T11:41:42Z")
This seems to have worked. What I did: - Download the crt of the root CA and save as c:\temp\rootca.crt - Create a secret in the awxtest namespace: `kubectl create secret generic awx-custom-certs --from-file=bundle-ca.crt=c:\temp\rootca.crt -n awxtest` - Update the `awx.yaml` file by adding `bundle_cacert_secret: awx-custom-certs` to the spec. - Redeploy: `kubectl apply -f awx.yaml -n awxtest` - Restart the task and web pods: `kubectl rollout restart deployment awxtest-web -n awxtest` (and the same for `deployment awxtest-task`) As for logging: I found out that the API (`https://awx.host/api/v2/notifications/`) showed the error. ---
**Author:** ![system](https://us1.discourse-cdn.com/ansible/original/1X/1882d9a01da5d8996a862359b0913cc568a39b84.svg) [@system](https://forum.ansible.com/u/system)\ **Post date:** [November 12, 2025, 11:41am UTC](https://forum.ansible.com/t/questions-about-notifications-in-awx-24-6-1/44648/8 "2025-11-12T11:41:57Z")
Closed on November 12, 2025, 11:41am UTC This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.