AWX - build to run

AWX Resource Requirements

Voir :

Requirement	Required
RAM	16 GB
CPUs	4
Local disk	40 GB min (20GB min available under /var/lib/awx)
Local disk	1500 IOPS

PostgreSQL requirements

Voir :

https://docs.redhat.com/de/documentation/red_hat_ansible_automation_platform/2.4/html-single/red_hat_ansible_automation_platform_planning_guide/index#ref-postgresql-requirements

Requirement	Required
RAM	16 GB
CPUs	4
Local disk	20 GB dedicated hard disk space. 150 GB+ recommended
Local disk	1500 IOPS

Prérequis logiciels

have configured an NTP client on all nodes

Architecture

Choix :

Base de données sur le hôte ou sur K8S ?
- Idéalement Postgres dans un conteneur : plus de souplesse avec la gestion des versions

Conf système hôte

Réactiver SELinux
Après avoir redéfini ipv6_disabled, si OK désactiver l'IPv6 sur le hôte et tester

Changer dans Job settings - Container Run Options

[
  "--network",
  "slirp4netns:enable_ipv6=true"
]

Conf Podman

Tester le démarrage automatique native Podman

podman update --restart-policy=always kind-control-plane

A la place de ~/.config/systemd/user/container-kind-control-plane.service

Conf AWX

Voir :

https://docs.ansible.com/projects/awx-operator/en/latest/migration/migration.html#creating-secrets-for-migration

kubectl get AWX -o json | jq '.items[0].spec'

auto_upgrade
hostname
ipv6_disabled

Sauvegarde

De tous les objets AWX :

awx -f yaml export > all.yaml

: prévoir l'export / import de la base

PoC Stockage

Voir :

https://www.redhat.com/en/blog/when-localhost-isnt-what-it-seems-in-red-hat-ansible-automation-platform-2?sc_cid=7015Y000003t7aWQAQ

cluster-config.yml

kind: Cluster
apiVersion: kind.x-k8s.io/v1alpha4
nodes:
- role: control-plane2
  extraPortMappings:
    - containerPort: 30000
      hostPort: 30000
      protocol: TCP
  extraMounts:
    - containerPath: /data/files
      hostPath: /data/files

ansible-files-pv.yml

---
apiVersion: v1
kind: PersistentVolume
metadata:
  name: awx-ansible-files-volume
spec:
  accessModes:
    - ReadWriteOnce
  persistentVolumeReclaimPolicy: Retain
  capacity:
    storage: 2Gi
  storageClassName: local-path
  hostPath:
    path: /data/ansible-files

ansible-files-pvc.yml

---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: awx-ansible-files-claim
spec:
  accessModes:
    - ReadWriteOnce
  volumeMode: Filesystem
  resources:
    requests:
      storage: 2Gi
  storageClassName: local-path

cluster-config.yml

---

kind: Cluster
apiVersion: kind.x-k8s.io/v1alpha4
nodes:
  - role: control-plane
    extraPortMappings:
      - containerPort: 30000
        hostPort: 30000
        protocol: TCP
    extraMounts:
      - containerPath: /data/ansible-files
        hostPath: /data/ansible-files
      - containerPath: /data/projects
        hostPath: /data/projects
      - containerPath: /data/postgres-13
        hostPath: /data/postgres-13

kind create cluster --config=cluster-config.yml --name=kind2
 
# kubectl create deployment nginx --image=nginx --port=80
# kubectl create service nodeport nginx --tcp=80:80 --node-port=30000
 
kubectl create service nodeport awx-service --tcp=80:80 --node-port=30000

Dans jobs settings changer :

Paths to expose to isolated jobs

[
  "/etc/pki/ca-trust:/etc/pki/ca-trust:O",
  "/usr/share/pki:/usr/share/pki:O"
]