3 ms·
I was pretty excited about AWX, we had finally deployed a few things to provide some of the functionality (Rundeck and some custom runners, also tried but decid
by linsomniac 9y ago
I was pretty excited about AWX, we had finally deployed a few things to provide some of the functionality (Rundeck and some custom runners, also tried but decided against StackStorm since it has no role based task limits in the non-enterprise version).
I gave Jeff's (author of this piece) Ansible role a try and had an AWX system up and running quickly. He's making some really nice Ansible roles.
But I had no luck with AWX. I think if you are using entirely platforms that are supported directly by AWX (OpenStack/AWS/Azure), you might be fine. We run 80% of our stack on Ganeti, and have a custom inventory script that AWX seems entirely unable to use. Even distiling that dynamic inventory down into a static inventory isn't working in my testing because it wants our Vault password to load the inventory, and the inventory task doesn't allow for associating vault credentials. Nor does it seem to provide the boto credentials needed by our dynamic inventory script, even though it has a spot for providing AWS credentials.
I want to try it one more time to see if I can find a combination of static inventory that doesn't need the Vault.
But at the moment, the Rundeck weirdness with our inventory is less than the AWX weirdness, so that is our solution. I'm sure I'm just not getting something about AWX, but I've spent a day with the docs and made no real progress.
It's awesome to have available as an option. I wanted to get Tower but could never secure the funding for it, largely because it was a big unknown.
- chucky_z 9y agoI ended up throwing our AWS credentials right into the dynamic inventory script itself. It sounds janky but I mean... it worked. You _should_ be able to pass in a vault password as well, as part of any job? Are you doing something with vault in your inventory?
- linsomniac 9y agoI'm not doing anything with the vault in the inventory that I know of. After thinking some more on it, I think the problem is that I put the static inventory in the directory that also has group_vars in it, and that has vault files in it, so Ansible is wanting the vault password. I'm going to try putting it somewhere else, but I have to start from scratch with the new instance.
- geerlingguy 9y agoI'm still working on getting a Dockerless install up and running, because I want to be able to tweak the innards that make it all work a little more (I still don't fully grasp the AWX system architecture, because some of it is masked by the Docker setup). There are still a couple small bugs with my Docker image (if you're testing with that) that I just haven't had the time to work out; you might be running into one or two of them :(
- linsomniac 9y agoDockerless would be nice, but I don't hold out much hope for it on an Ubuntu host. ;-) I'm guessing that it really wants to run on a RedHat variant.
- AlanSE 9y agoThere's an open PR that adds support for using vault with inventory imports, you should go comment on that if it's important to your use case.