[AWX 19.5] - password for awx superuser container

[Wesley Santos]

This command creates a superuser to access awx web;

kubectl exec -n awx -it awx-xxxxxxxxxxxx -c awx-task -- /bin/bash

But what is the superuser password of the container user awx;?
or how to configure a superuser for awx-taks container?

bash-4.4$ id

uid=1000(awx) gid=0(root) groups=0(root),1000

bash-4.4$ sudo su -

We trust you have received the usual lecture from the local System

Administrator. It usually boils down to these three things:

    #1) Respect the privacy of others.
    #2) Think before you type.
    #3) With great power comes great responsibility.

[sudo] password for awx:

[Rebeccah Hunter]

Hi there,

We have docs on how to configure a superuser here: https://docs.ansible.com/ansible-tower/latest/html/administration/tipsandtricks.html#id3

cheers,

@rebeccahhh

[Balaji Rchawdi]

Unfortunately, the link does not answer the original question. 

I am facing this issue too. I am unable to become root in awx-ansible-task pod.

[Martin Gabriel]

im also interested into this.

Dne čtvrtek 3. března 2022 v 5:23:28 UTC+1 uživatel Balaji Rchawdi napsal:

[Thomas Renzy]

What I've used is:

kubectl -n (AWX container name) get secret awx-admin-password -o go-template='{{range $k,$v := .data}}{{printf "%s: " $k}}{{if not $v}}{{$v}}{{else}}{{$v | base64decode}}{{end}}{{"\n"}}{{end}}'

Hope this helps.

Thomas

--
You received this message because you are subscribed to the Google Groups "AWX Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to awx-project...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/awx-project/875ef9e4-dd67-4be7-a394-56d6e6acad32n%40googlegroups.com.

[Balaji Rchawdi]

Thank  You, Thomas

This command gives the password for user "admin". I used it to log in to http://<IP_address>:31280 awx webUI.

[Hiero-nymo]

Hi everyone,

I am also very interested in getting the answer.
Have you found a solution in the meantime?

Thank you and best regards, H

[AWX Project]

Hi,

You may just try to do "docker exec -u0 -it container_name bash" to get root permission in the running container. If you are on minikube you may need to do a "minikube ssh" first to gain access to the running containers. This will be different if you are using something else like k3s

AWX Team

[Hiero-nymo]

Hi

Thanks but I'm using as you said k3s. Is this a solution with that?

Hiero-nymo

[Wei-Yen Tan]

Yoy can use kubectl Exec into the awx-Web container 

Get Outlook for iOS

---

From: awx-p...@googlegroups.com <awx-p...@googlegroups.com> on behalf of Hiero-nymo <jer.m...@gmail.com>
Sent: Saturday, July 9, 2022 3:15:49 AM
To: AWX Project <awx-p...@googlegroups.com>
Subject: Re: [awx-project] Re: [AWX 19.5] - password for awx superuser container

 

To view this discussion on the web visit https://groups.google.com/d/msgid/awx-project/4743d9c7-f7a1-4acd-afb0-c147332bcb37n%40googlegroups.com.

[kurokobo]

Hi,

Technically, you can.

However, it is important to note that any changes in the container are volatile and all changes will be lost on re-creation of the pod.

If you need this method for anything other than debugging or investigation purposes, I think you are probably on the wrong way for your purpose.

$ sudo /usr/local/bin/k3s ctr task exec -t --exec-id <unique-name> --user 0 <container-id> bash

e.g.

$ sudo /usr/local/bin/k3s ctr task exec -t --exec-id bash-example --user 0 c2db413be4684979c9055c788f751c676b8c898d33582c5fa7dbeeef8ec8fb22 bash

You can get <container-id> by "kubectl -n awx describe pod <pod-name>"; 

$ kubectl -n awx describe pod awx-76445c946f-btfzz

...

  awx-task:
    Container ID:  containerd://c2db413be4684979c9055c788f751c676b8c898d33582c5fa7dbeeef8ec8fb22

...

--

@kurokobo

------- Original Message -------

To view this discussion on the web visit https://groups.google.com/d/msgid/awx-project/4743d9c7-f7a1-4acd-afb0-c147332bcb37n%40googlegroups.com.

[Shubha Shivanna]

i am having same question, can anyone help ?

trying to install tcpdump 

>> kubectl exec -i -t <pod name> -n awx --container awx-web -- /bin/bash

bash-5.1$ yum install tcpdump
Error: This command has to be run with superuser privileges (under the root user on most systems).
bash-5.1$
bash-5.1$
bash-5.1$ sudo yum install tcpdump

We trust you have received the usual lecture from the local System
Administrator. It usually boils down to these three things:

    #1) Respect the privacy of others.
    #2) Think before you type.
    #3) With great power comes great responsibility.

[sudo] password for awx:

[AWX Project]

@khush which k8s are you using? (k3s, minikube, etc)

kuro's suggestion above is the way to do it via k3s

the other alternative is to use docker to build a new image based off of quay.io/ansible/awx image and install tcpdump. Then you can use that image by setting "image" and "image_version" in your awx CRD

AWX Team

[Shubha Shivanna]

tanq u. lemme chk to install in the new image