CI / CD & IaC

Ansible AWX

DCDR

Ansible automation platform — operator-managed, OIDC against Keycloak.

Quick facts

awx-operator
3.2.1
AWX version
24.6.1
Database
Operator-managed Postgres 15 (c9s)
OIDC
SOCIAL_AUTH_OIDC_* against Keycloak
Hostname
awx.apps.sub.comptech-lab.com
Failover (DC→DR)
~14 s
Failover (DR→DC)
~42 s
Healthcheck
GET / (200 / 30x — 302 → /login/ at steady state)

What it is

One AWX instance per cluster, fronted by the edge HAProxy with DC primary + DR backup. Container images (awx, awx-ee, awx-operator) are ctr-imported on DR (and rke2-3) to avoid slow Quay.io pulls.

Architecture

Add diagrams or topology notes here — how this component sits relative to DC/DR, what replicates, and what speaks to it. Mermaid blocks render as plain text today; embed images under /assets/ when needed.

Configuration

Add chart values overrides, important env vars, OIDC client config, secret references. Link to the source files in infra/gitops-rke2 rather than copying YAML wholesale — the repo is the source of truth.

Operations

Add runbook notes: backup, restore, common troubleshooting, dashboards, on-call cheatsheet entries.

Failover

Add DC/DR cutover/cutback notes: edge HAProxy backend name, healthcheck path, measured cutover/cutback times, smoke-test commands.

References