awx icon indicating copy to clipboard operation
awx copied to clipboard

generate install bundle for adding remote execution node

Open TheRealHaoLiu opened this issue 3 years ago • 2 comments

Summary

As a user that want to add a remote execution node, I want AWX to generate a bundle of "Ansible goodness" (playbook with all the required variables) that I can use to easily provision a remote execution node and have AWX able to connect to the new remote execution node.

Acceptance Criteria

  • [ ] install bundle must setup the correct TLS certificate for establishing connection between AWX control node and the targeted remote execution node.
  • [ ] install bundle must setup the correct work-sigining to receive work from AWX controlplane
  • [ ] at the end we should end up with a remote execution node that can receive and execute job from AWX controlplane

TheRealHaoLiu avatar Aug 02 '22 01:08 TheRealHaoLiu

the command for generating certificate for receptor

receptor --cert-makereq bits=2048 commonname=$hostname dnsname=$hostname nodeid=$hostname outreq=/etc/receptor/tls/receptor.req outkey=/etc/receptor/tls/receptor.key

receptor --cert-signreq req=/etc/receptor/tls/receptor.req cacert=/etc/receptor/tls/ca/receptor-ca.crt cakey=/etc/receptor/tls/ca/receptor-ca.key outcert=/etc/receptor/tls/receptor.crt verify=yes

TheRealHaoLiu avatar Aug 04 '22 19:08 TheRealHaoLiu

@shanemcd to make the certs the awx-web container would need the receptor binary present in the container. Are we okay doing that?

fosterseth avatar Aug 04 '22 20:08 fosterseth

mocked instance install bundle download endpoint PR merged into feature branch https://github.com/ansible/awx/pull/12643 behavior revised in https://github.com/ansible/awx/pull/12679

TheRealHaoLiu avatar Aug 18 '22 15:08 TheRealHaoLiu

We are blocked to test until https://issues.redhat.com/browse/AAP-5543 and https://github.com/ansible/tower/issues/6081 are done

CFSNM avatar Sep 06 '22 11:09 CFSNM

Validated from QE side. Closing

CFSNM avatar Sep 19 '22 19:09 CFSNM