Unable to update apps -- 403 on /api/pages/uuids/<hash>/save in dev tools network

Hi All,

I've got a self hosted retool deployed to an EKS Cluster. I think everything is mostly in place (I've spent an hour or two at this point thoroughly checking every configuration against another retool instance that is fully functional).

I can invite users and they can log in. I've added the self hosted database resource (e.g. Set up Retool Database on Self-hosted deployments | Retool Docs)

I can create an app; however, I am not able to save anything. Whenever I try and add a generic table e.g. literally dragging the table resource into the app field from the edit sidebar the following happens:

The table appears in my app
The dev tools display a 403 error on save (see screenshots below)
If I close the edit window and re-open the app the table is gone

There's no logs related to this issue in the EKS Pods as well or any request ID in the Network Headers.

Any ideas?


1 Like

Hey @sean-kobold - welcome to the community! :wave:

It took me a little while to figure out what might be going on here, but I talked to a colleague and they pointed out that the Retool backend would never respond with an HTML error page. This means that something in your EKS network is preventing the request from ever reaching the backend, which is also why you don't see the request being logged or an associated requestId.

The most likely culprit is likely one of the following:

  • Web Application Firewall
  • Proxy
  • Network Load Balancer
  • VPN

Assuming the functional instance is in another cluster, I'd start by comparing some of the above networking elements. I realize that's a ton of surface area to cover, but hopefully you have an idea of where to look!

Thanks! It was definitely the WAF

1 Like