Update Docker & Kubernetes/Servers/AWX/AWX Operator/Ansible AWX Operator.md

This commit is contained in:
2024-08-01 06:03:23 -06:00
parent 49f63cbd5a
commit e2ab8d860f

View File

@ -260,6 +260,25 @@ Run the following command to apply the Kerberos Keytab file as a configmap into
kubectl -n awx create configmap awx-kerberos-config --from-file=/awx/krb5.conf kubectl -n awx create configmap awx-kerberos-config --from-file=/awx/krb5.conf
``` ```
### Create Custom DNS Host Records for Domain Controllers
You will need to be sure that AWX is able to resolve the FQDNs of the domain controllers for Kerberos to be happy. We will do this by adding another config file in the `/awx` directory and applying it to the deployment.
```jsx title="/awx/custom_dns_records.yml"
apiVersion: v1
kind: ConfigMap
metadata:
name: custom-dns
namespace: awx
data:
custom-hosts: |
192.168.3.25 LAB-DC-01.bunny-lab.io LAB-DC-01
192.168.3.26 LAB-DC-02.bunny-lab.io LAB-DC-02
```
Then we apply them with the following command:
``` sh
kubectl apply -f custom_dns_records.yml
```
### Create an AWX Container Group ### Create an AWX Container Group
At this point, we need to make a custom pod for the AWX Execution Environments that will use this Kerberos file. Reference information was found [here](https://github.com/kurokobo/awx-on-k3s/blob/main/tips/use-kerberos.md#create-container-group). At this point, we need to make a custom pod for the AWX Execution Environments that will use this Kerberos file. Reference information was found [here](https://github.com/kurokobo/awx-on-k3s/blob/main/tips/use-kerberos.md#create-container-group).
@ -275,8 +294,15 @@ metadata:
spec: spec:
serviceAccountName: default serviceAccountName: default
automountServiceAccountToken: false automountServiceAccountToken: false
initContainers:
- name: init-hosts
image: busybox
command: ['sh', '-c', 'cat /etc/custom-dns/custom-hosts >> /etc/hosts']
volumeMounts:
- name: custom-dns
mountPath: /etc/custom-dns
containers: containers:
- image: quay.io/ansible/awx-ee:latest - image: 'quay.io/ansible/awx-ee:latest'
name: worker name: worker
args: args:
- ansible-runner - ansible-runner
@ -294,6 +320,10 @@ spec:
- name: awx-kerberos-volume - name: awx-kerberos-volume
configMap: configMap:
name: awx-kerberos-config name: awx-kerberos-config
- name: custom-dns
configMap:
name: custom-dns
``` ```
### Job Template & Inventory Examples ### Job Template & Inventory Examples