Re: [D] Getting `403 Client Error: Forbidden for url` when trying to display logs. But webserver-secret-key is configured. [airflow]

["Chais (via GitHub)" <gi...@apache.org>]

GitHub user Chais edited a discussion: Getting `403 Client Error: Forbidden for url` when trying to display logs. But webserver-secret-key is configured.

I'm getting the error `Could not read served logs: 403 Client Error: Forbidden for url` when I try to display a task's log on the web UI.  
I followed https://airflow.apache.org/docs/apache-airflow/stable/configurations-ref.html#secret-key and checked if `webserver-secret-key` is set. I'm running an extended 2.11.0 image with the 1.16.0 chart. Checking for the `AIRFLOW__WEBSERVER__SECRET_KEY` env var I found the following configuration:

Pod | Container | Variable set
:--- | :--- | :---:
airflow-redis | redis | :x: 
airflow-scheduler | scheduler | :heavy_check_mark: 
|| git-sync | :x: 
|| scheduler-log-groomer | :x:
airflow-statsd | statsd | :x:
airflow-triggerer | triggerer | :heavy_check_mark: 
|| git-sync | :x:
|| triggerer-log-groomer | :x:
airflow-webserver | webserver | :heavy_check_mark: 
airflow-worker | worker | :heavy_check_mark: 
|| git-sync | :x:
|| worker-log-groomer | :x:

So I would assume the relevant pods/containers do have the variable set. The values are all identical.  
The URL reads `/log/` instead of `/logs/`, which is the actual directory name, but `base_log_folder` is unchanged from the default `${AIRFLOW_HOME}/logs`.  
Also the log files are written correctly and are, along with all intermediate directories world readable, so access shouldn't be an issue, either.
So my question is: What else might cause this error?

Any ideas?

GitHub link: https://github.com/apache/airflow/discussions/57606

----
This is an automatically sent email for commits@airflow.apache.org.
To unsubscribe, please send an email to: commits-unsubscribe@airflow.apache.org