Getting 403 Client Error: Forbidden for url when trying to display logs. But webserver-secret-key is configured.

[Chais]

I'm getting the error Could not read served logs: 403 Client Error: Forbidden for url when I try to display a task's log on the web UI.
I followed https://airflow.apache.org/docs/apache-airflow/stable/configurations-ref.html#secret-key and checked if webserver-secret-key is set. I'm running an extended 2.11.0 image with the 1.16.0 chart. Checking for the AIRFLOW__WEBSERVER__SECRET_KEY env var I found the following configuration:

Pod	Container	Variable set
airflow-redis	redis	❌
airflow-scheduler	scheduler	✔️
	git-sync	❌
	scheduler-log-groomer	❌
airflow-statsd	statsd	❌
airflow-triggerer	triggerer	✔️
	git-sync	❌
	triggerer-log-groomer	❌
airflow-webserver	webserver	✔️
airflow-worker	worker	✔️
	git-sync	❌
	worker-log-groomer	❌

So I would assume the relevant pods/containers do have the variable set. The values are all identical.
The URL reads /log/ instead of /logs/, which is the actual directory name, but base_log_folder is unchanged from the default ${AIRFLOW_HOME}/logs.
Also the log files are written correctly and are, along with all intermediate directories world readable, so access shouldn't be an issue, either.
So my question is: What else might cause this error?

Any ideas?

[Chais]

I was able to solve this. Turns out that having 10.0.0.0/8 as part of the no_proxy variable was not enough to prevent the webserver pod from trying to access the worker pod holding the logs through the configured proxy. I had to add cluster.local to the list of exempt targets.