https://prefect.io logo
Title
h

Hamza Naanani

10/26/2022, 3:04 PM
Hello, I'm trying to deploy prefect agents on an on prem environment, but I get a
prefect.exceptions.PrefectHTTPStatusError: Client error '403 Forbidden' for url '<https://api.prefect.cloud/api/accounts/xxxxxxxx/workspaces/xxxxx/work_queues/name/dev-prem-wq>'
I tried changing the api keys (service account) / giving ownership to the agent on the workspace, but nothing worked so far. I tried deploying the agents on the cloud on a kubernetes cluster and it works just fine, but when I try to do the same thing on our on prem environment, it returns me this error. Can I have some insights please ? Thanks
1
c

Christopher Boyd

10/26/2022, 3:27 PM
Hi Hamza, A 403 error is saying “this request made it, but is forbidden” which is explicit. Do you have a proxy in between the agent and API? When you tried it in the cloud, was it using the same api key / service account?
h

Hamza Naanani

10/26/2022, 3:29 PM
I do have a corporate proxy that I set (which I don't on the cloud) I used the same api key / service account on the cloud and it didn't work, so I switched the service account / key and still doesn't work. Is it possible that my request is getting blocked by the proxy ?
Or is it blocked by prefect cloud itself ?
c

Christopher Boyd

10/26/2022, 3:30 PM
If you have a proxy in teh way, the proxy is acting on behalf of your client, so it’s possible the api key is not being used by the proxy to re-negotiate the session
you can try setting a no_proxy to bypass it
h

Hamza Naanani

10/26/2022, 3:32 PM
Okey, thanks for the insight, I'll check with the infrastructure team and get back to you tomorrow ^^ But I do believe I have to set the proxy or I won't be able to make the request to the internet :/
c

Christopher Boyd

10/26/2022, 3:32 PM
Ill see if I have / can find any documentation regarding supporting this behind a proxy