This seems to have worked.
What I did:
- Download the crt of the root CA and save as c:\temp\rootca.crt
- Create a secret in the awxtest namespace:
kubectl create secret generic awx-custom-certs --from-file=bundle-ca.crt=c:\temp\rootca.crt -n awxtest
- Update the
awx.yaml
file by addingbundle_cacert_secret: awx-custom-certs
to the spec. - Redeploy:
kubectl apply -f awx.yaml -n awxtest
- Restart the task and web pods:
kubectl rollout restart deployment awxtest-web -n awxtest
(and the same fordeployment awxtest-task
)
As for logging: I found out that the API (https://awx.host/api/v2/notifications/
) showed the error.