AWX Migration from 11x to 22x. Unable to find the line ca_trust_dir=/etc/pki/ca-trust/source/anchors

Archives AWX Project
,
1

Hi,

I am not able find an alternative to uncomment the line “ca_trust_dir=/etc/pki/ca-trust/source/anchors” when i upgraded from AWX 11x to 22x in the inventory file.

Note: I used the docker installation and not the kubernetes installation. Please help me

2

Hello,
We would like to gather a bit more information from you. Could you provide us with the issue you are encountering that is requiring this line to be uncommented? Any additional information you can provide regarding the issue you are encountering will be very helpful. Thank you for your time!

3

Hello,

So i installed AWX 22.x the latest one and migrated the postgres db from AWX 11.x. The migration was successful but its not letting other users login. I am only able to login with the admin account.

I tried to add this line to docker-compose.yml file but when i ran the command for the changes to take effect it reverted back and i dont see this anymore.

working_dir: “/awx_devel”
volumes:

  • “…/…/…/:/awx_devel”
  • “…/…/docker-compose/supervisor.conf:/etc/supervisord.conf”
  • “…/…/docker-compose/_sources/database.py:/etc/tower/conf.d/database.py”
  • “…/…/docker-compose/_sources/websocket_secret.py:/etc/tower/conf.d/websocket_secret.py”
  • “…/…/docker-compose/_sources/local_settings.py:/etc/tower/conf.d/local_settings.py”
  • “…/…/docker-compose/_sources/nginx.conf:/etc/nginx/nginx.conf”
  • “…/…/docker-compose/_sources/nginx.locations.conf:/etc/nginx/conf.d/nginx.locations.conf”
  • “…/…/docker-compose/_sources/SECRET_KEY:/etc/tower/SECRET_KEY”
  • “…/…/docker-compose/_sources/receptor/receptor-awx-1.conf:/etc/receptor/receptor.conf”
  • “…/…/docker-compose/_sources/receptor/receptor-awx-1.conf.lock:/etc/receptor/receptor.conf.lock”

- “…/…/docker-compose/_sources/certs:/etc/receptor/certs” # TODO: optionally generate certs

  • “/sys/fs/cgroup:/sys/fs/cgroup”
  • “~/.kube/config:/var/lib/awx/.kube/config”
  • “redis_socket_1:/var/run/redis/:rw”
  • “/etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro”
    privileged: true

Please help in this regard.

Thanks
Minhaj

4

Have you looked into deploying AWX on Kubernetes via the operator? that is our recommended way of using AWX in production. The docker-compose.yml is for intended development purposes only.

I’d recommend trying to migrate over to the K8S deployment, as it is easier to get help around problems that might arise. The install guide is here https://github.com/ansible/awx-operator

AWX Team

5

Hi,

So is there no way for the AWX 22 docker installation to add ca-certs? I have checked the Kubernetes method but my organization right now is not really inclined to move from docker containers to kubernetes.