# Unable to login after upgrade from 4.7.1 to 4.8.1

**URL:** <https://forum.ansible.com/t/unable-to-login-after-upgrade-from-4-7-1-to-4-8-1/2640>\
**Category:** Get Help\
**Tags:** galaxy-ng\
**Created:** [November 29, 2023, 11:16pm UTC](https://forum.ansible.com/t/unable-to-login-after-upgrade-from-4-7-1-to-4-8-1/2640 "2023-11-29T23:16:52Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![AdamWyzgol](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/adamwyzgol/32/1671_2.png) [@AdamWyzgol](https://forum.ansible.com/u/AdamWyzgol)\
**Post date:** [November 29, 2023, 11:16pm UTC](https://forum.ansible.com/t/unable-to-login-after-upgrade-from-4-7-1-to-4-8-1/2640/1 "2023-11-29T23:16:52Z")

</div>

After upgrade from 4.7.1 to 4.8.1 I’m unable to login to my local Galaxy Ng. Something is broken o I need to somehow migrate password hash? after downgrade to 4.7.1 everything works again. I’m using Galaxy on k8s staged by Pulp Operator.

---

<div class="post-metadata">

**Author:** ![himdel](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/himdel/32/581_2.png) [@himdel](https://forum.ansible.com/u/himdel)\
**Post date:** [November 30, 2023, 10:17pm UTC](https://forum.ansible.com/t/unable-to-login-after-upgrade-from-4-7-1-to-4-8-1/2640/2 "2023-11-30T22:17:02Z")

</div>

If your setup involves any sort of proxying, it may be worth investigating which headers are being passed.

4.7 → 4.8 involves a major Django update, I believe there were some CORS changes, and I’ve definitely seen an authentication error when the Origin header was missing ([details](https://github.com/ansible/ansible-hub-ui/pull/3994)).

---

<div class="post-metadata">

**Author:** ![AdamWyzgol](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/adamwyzgol/32/1671_2.png) [@AdamWyzgol](https://forum.ansible.com/u/AdamWyzgol)\
**Post date:** [November 30, 2023, 10:29pm UTC](https://forum.ansible.com/t/unable-to-login-after-upgrade-from-4-7-1-to-4-8-1/2640/3 "2023-11-30T22:29:52Z")

</div>

Thanks for hint, I’m using ingress with Traefik so maybe there is something wrong. I will investigate that.

---

<div class="post-metadata">

**Author:** ![AdamWyzgol](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/adamwyzgol/32/1671_2.png) [@AdamWyzgol](https://forum.ansible.com/u/AdamWyzgol)\
**Post date:** [December 1, 2023, 12:47am UTC](https://forum.ansible.com/t/unable-to-login-after-upgrade-from-4-7-1-to-4-8-1/2640/4 "2023-12-01T00:47:25Z")

</div>

Looks like a but in pulp operator [Unable to login to 4.8.1 version of Galaxy NG · Issue #1162 · pulp/pulp-operator (github.com)](https://github.com/pulp/pulp-operator/issues/1162)

---

<div class="post-metadata">

**Author:** ![kurokobo](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/kurokobo/32/182_2.png) [@kurokobo](https://forum.ansible.com/u/kurokobo)\
**Post date:** [December 1, 2023, 1:26pm UTC](https://forum.ansible.com/t/unable-to-login-after-upgrade-from-4-7-1-to-4-8-1/2640/5 "2023-12-01T13:26:43Z")

</div>

You can add `CSRF_TRUSTED_ORIGINS` through `pulp_settings` in your CR:

```yaml
apiVersion: repo-manager.pulpproject.org/v1beta2
kind: Pulp
metadata:
  name: galaxy
spec:
  deployment_type: galaxy
  image: quay.io/pulp/galaxy
  image_version: 4.8.1
  image_web: quay.io/pulp/galaxy-web
  image_web_version: 4.8.1
  ...
  pulp_settings:
    ...
    CSRF_TRUSTED_ORIGINS: 👈👈👈
      - https://galaxy.example.com 👈👈👈
  ...

```

---

<div class="post-metadata">

**Author:** ![kurokobo](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/kurokobo/32/182_2.png) [@kurokobo](https://forum.ansible.com/u/kurokobo)\
**Post date:** [December 1, 2023, 1:33pm UTC](https://forum.ansible.com/t/unable-to-login-after-upgrade-from-4-7-1-to-4-8-1/2640/6 "2023-12-01T13:33:16Z")

</div>

Ah this is already answered on GitHub, sorry for my duplicated answer. Anyway I realize I forgot to update [my guide](https://github.com/kurokobo/awx-on-k3s/tree/main/galaxy), so I appreciate you posting this topic 😃