setting up kerberos, timezone and ansible.cfg in Customized setup of AWX-Operator in airgapped environment

Viewed 8

Im really new to this and I'm going to setup a functional proof of concept with k3s. im able to setup a default awx environment by the following files after doing make deploy from a downloaded version of awx-operator.

What i now need is to be able to get everything away fro UTC to Europe/Oslo as timezone, make winRM remoting working. (unsure how as with default deployment kerberos login will fail. Might be due to timeskew but also missing krb5 config). How to configure awx operator to setup krb5 functionally?

Also id like to mount a local version of /etc/ansible/ansible.cfg persistent. So even if i restart server etc this file will still be read from host and used by awx-operator.

i saw k8tz but doesnt seem to be able to install this without internet access. Also i havent fully grasped the setup of ut yet.

I kindly ask for full yaml examples as im not that great yet at understanding the full buildup yet.

---
apiVersion: v1
kind: Secret
metadata:
  name: awx-postgres-configuration
  namespace: awx
stringData:
  host: awx-postgres-13
  port: "5432"
  database: awx
  username: awx
  password: MyPassword
  type: managed
type: Opaque

---
apiVersion: v1
kind: Secret
metadata:
  name: awx-admin-password
  namespace: awx
stringData:
  password: MyPassword
type: Opaque

---
apiVersion: v1
kind: PersistentVolume
metadata:
  name: awx-postgres-volume
  namespace: awx
spec:
  accessModes:
    - ReadWriteOnce
  persistentVolumeReclaimPolicy: Retain
  capacity:
    storage: 8Gi
  storageClassName: awx-postgres-volume
  hostPath:
    path: /data/postgres-13
---
apiVersion: v1
kind: PersistentVolume
metadata:
  name: awx-projects-volume
  namespace: awx
spec:
  accessModes:
    - ReadWriteOnce
  persistentVolumeReclaimPolicy: Retain
  capacity:
    storage: 2Gi
  storageClassName: awx-projects-volume
  hostPath:
    path: /data/projects


---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: awx-projects-claim
  namespace: awx
spec:
  accessModes:
    - ReadWriteOnce
  volumeMode: Filesystem
  resources:
    requests:
      storage: 2Gi
  storageClassName: awx-projects-volume

Then the last part to create the pods etc.

---
apiVersion: awx.ansible.com/v1beta1
kind: AWX
metadata:
  name: awx
  namespace: awx
spec:

  # Set the replicas count to scale AWX pods
  #replicas: 3

  admin_user: admin
  admin_password_secret: awx-admin-password

  ingress_type: ingress
  ingress_tls_secret: awx-secret-tls
  hostname: my.domain.com     # Replace fqdn.awx.host.com with Host FQDN and DO NOT use IP.

  postgres_configuration_secret: awx-postgres-configuration

  postgres_storage_class: awx-postgres-volume
  postgres_storage_requirements:
    requests:
      storage: 8Gi

  projects_persistence: true
  projects_existing_claim: awx-projects-claim
  web_resource_requirements: {}
  ee_resource_requirements: {}
  task_resource_requirements: {}


  no_log: "false"

  
  #ldap_cacert_secret: awx-ldap-cert


0 Answers
Related