Howto to deploy kerberos (krb5.conf) info during awx operator install?

Archives Ansible Project
1

I am deploying awx 21.1.0 using the 0.22.0 operator into a minikube cluster doing what they call a ‘basic install’ by way of creating the documented kustomize.yml .

https://github.com/ansible/awx-operator#basic-install

But then my awx pods do not have the required kerberos realm info and both winrm and kerberos transports fail.

How do I add the contents of my locally required krb5.conf file to all pods via the new operator install method?

2

OK, I think I have part of an answer but I am not getting the syntax right for a successful Kubernetes deployment it looks like.

Can somebody look this over and help me out in getting the yaml file syntax right, please?

3

Hi,

Even if you get it working, this will not help. The configuration from the containers is not related to the pod(s) launched when running a playbook. You need to modify the default container group or create a new one. For example, goto “Administration” → “Instance Groups” and edit the “default” group.
Change spec to something like this (maybe you need to change the name of the configMap in volumes section):

apiVersion: v1
kind: Pod
metadata:
namespace: awxop
spec:
serviceAccountName: default
automountServiceAccountToken: false
containers:

  • image: ‘quay.io/ansible/awx-ee:latest’
    name: worker
    args:
  • ansible-runner
  • worker
  • ‘–private-data-dir=/runner’
    resources:
    requests:
    cpu: 250m
    memory: 100Mi
    volumeMounts:
  • name: krb5-conf
    mountPath: /etc/krb5.conf
    subPath: krb5.conf
    volumes:
  • name: krb5-conf
    configMap:
    name: awx-demo-extra-config

Regards

Sebastian