Jeremy T. Bouse

I recently performed a similar upgrade from on old AWX 6.1.0.0 docker + ext RDS DB to AWX 20.1.0 Operator 0.20.0 + ext RDS DB. From my experience the database...

From the annotations, I assume you're using the `aws-load-balancer-controller`? On my deployments I've just used the following snippet: ```yaml spec: ingress_type: ingress hostname: awx.example.com ingress_annotations: | kubernetes.io/ingress.class: "alb" alb.ingress.kubernetes.io/scheme: "internet-facing"...

Yeah, I ran into this with v0.88.0, and it wasn't until I realized the issue was that the bucket policy was trying to enforce TLS and then that setting `allow_ssl_requests_only...

It seems like changing [L#26](https://github.com/saltstack-formulas/apache-formula/blob/master/apache/manage_security.sls#L26) to read as `- text: "{{ option }} {{ value }}\n"` instead of `- text: "{{ option }} {{ value }}"` as it is written...

@stokbaek that does sound like the issue... I'll push that Salt ticket through support and see if we can't get some more attention put on it.

> We had to use winbindd because SSSD did not support AD Trusts I don't think that's been the case for several years now, and SSSD provides much more integration...

> SSSD supports FreeIPA a lot better. If you have tested SSSD with AD Trust with Microsoft Active Directory, please let me know. I don't have an AD forest with...

The [documentation ](https://docs.pagure.org/sssd.sssd/design_pages/subdomain_configuration.html) page that led me to that ticket was which seems to indicate expansion of the domain options to provide configuration options to trusted domains. I also found...

Additionally found [this](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html-single/windows_integration_guide/index#trust) RedHat RHEL7 doc talking about AD cross-forest trusts.

Yeah reading more and even checking out the RHEL8 docs it looks like SSSD only supports domains in a single AD forest. So seems like I'll continue down my path...