AWX Migration from 11x to 22x. Unable to find the line ca_trust_dir=/etc/pki/ca-trust/source/anchors

[Minhaj Muhammad]

Hi, 

I am not able find an alternative to uncomment the line "ca_trust_dir=/etc/pki/ca-trust/source/anchors" when i upgraded from AWX 11x to 22x in the inventory file. 

Note: I used the docker installation and not the kubernetes installation. Please help me 

[AWX Project]

Hello,

We would like to gather a bit more information from you. Could you provide us with the issue you are encountering that is requiring this line to be uncommented? Any additional information you can provide regarding the issue you are encountering will be very helpful. Thank you for your time!

[Minhaj Muhammad]

Hello, 

So i installed AWX 22.x the latest one and migrated the postgres db from AWX 11.x. The migration was successful but its not letting other users login. I am only able to login with the admin account.

I tried to add this line to docker-compose.yml file but when i ran the command for the changes to take effect it reverted back and i dont see this anymore. 

 working_dir: "/awx_devel"
    volumes:
      - "../../../:/awx_devel"
      - "../../docker-compose/supervisor.conf:/etc/supervisord.conf"
      - "../../docker-compose/_sources/database.py:/etc/tower/conf.d/database.py"
      - "../../docker-compose/_sources/websocket_secret.py:/etc/tower/conf.d/websocket_secret.py"
      - "../../docker-compose/_sources/local_settings.py:/etc/tower/conf.d/local_settings.py"
      - "../../docker-compose/_sources/nginx.conf:/etc/nginx/nginx.conf"
      - "../../docker-compose/_sources/nginx.locations.conf:/etc/nginx/conf.d/nginx.locations.conf"
      - "../../docker-compose/_sources/SECRET_KEY:/etc/tower/SECRET_KEY"
      - "../../docker-compose/_sources/receptor/receptor-awx-1.conf:/etc/receptor/receptor.conf"
      - "../../docker-compose/_sources/receptor/receptor-awx-1.conf.lock:/etc/receptor/receptor.conf.lock"
      # - "../../docker-compose/_sources/certs:/etc/receptor/certs"  # TODO: optionally generate certs
      - "/sys/fs/cgroup:/sys/fs/cgroup"
      - "~/.kube/config:/var/lib/awx/.kube/config"
      - "redis_socket_1:/var/run/redis/:rw"
      - "/etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro"
    privileged: true

Please help in this regard. 

Thanks

Minhaj

[AWX Project]

Have you looked into deploying AWX on Kubernetes via the operator? that is our recommended way of using AWX in production. The docker-compose.yml is for intended development purposes only.

I'd recommend trying to migrate over to the K8S deployment, as it is easier to get help around problems that might arise. The install guide is here https://github.com/ansible/awx-operator

AWX Team

[Minhaj Muhammad]

Hi, 

So is there no way for the AWX 22 docker installation to add ca-certs? I have checked the Kubernetes method but my organization right now is not really inclined to move from docker containers to kubernetes.