{"id":1783,"date":"2020-12-17T20:15:00","date_gmt":"2020-12-17T19:15:00","guid":{"rendered":"https:\/\/robermb.com\/blog\/?p=1783"},"modified":"2020-12-22T17:54:37","modified_gmt":"2020-12-22T16:54:37","slug":"configure-ssl-https-on-ansible-awx","status":"publish","type":"post","link":"https:\/\/robermb.com\/blog\/geeks\/configure-ssl-https-on-ansible-awx\/","title":{"rendered":"Ansible AWX: How to configure SSL\/HTTPs"},"content":{"rendered":"\n

Initial situation, HTTP :<\/h3>\n\n\n\n

We have an standalone <\/strong>instance of Ansible AWX<\/strong>(Docker version) already installed in a CentOS linux machine.<\/p>\n\n\n\n

The web container <\/strong>called awx_web<\/strong>, is configured with http<\/strong>, port 80.<\/p>\n\n\n\n

# docker ps\nCONTAINER ID        IMAGE                COMMAND                  CREATED             STATUS              PORTS                  NAMES\nbb3053c6cd38        ansible\/awx:13.0.0   \"tini -- \/bin\/sh -c \u2026\"   7 days ago          Up 6 days           0.0.0.0:80<\/strong>->8052\/tcp   awx_web<\/strong><\/code><\/pre>\n\n\n\n
And the values into inventory file <\/strong>related to SSL are still commented :<\/p>\n\n\n\n
# vi \/opt\/ansible-awx\/awx\/installer\/inventory<\/code><\/pre>\n\n\n\n
host_port=80\n#host_port_ssl=443\n#ssl_certificate=<\/code><\/pre>\n\n\n\n
Configure SSL \/ HTTPs :<\/strong><\/h3>\n\n\n\n
In a testing Lab <\/strong>environment we need to create <\/strong>a self-signed certificate<\/strong>. <\/p>\n\n\n\n
Create awx-ssl<\/strong> folder <\/strong>in \/opt\/ansible-awx\/awx\/installer :<\/p>\n\n\n\n
# mkdir -p \/opt\/ansible-awx\/awx\/installer\/awx-ssl\n<\/code><\/pre>\n\n\n\n
Generate <\/strong>a self-signed SSL certificate<\/strong> with your own information :<\/p>\n\n\n\n
CN <\/strong>: Common Name
O <\/strong>: Organization
C <\/strong>: Country<\/p>\n\n\n\n
# openssl req -subj '\/CN=ansible.awx\/O=Lab\/C=FR' \\\n\t-new -newkey rsa:2048 \\\n\t-sha256 -days 1365 \\\n\t-nodes -x509 \\\n\t-keyout \/opt\/ansible-awx\/awx\/installer\/awx-ssl\/awx.key \\\n\t-out \/opt\/ansible-awx\/awx\/installer\/awx-ssl\/\/awx.crt\n<\/code><\/pre>\n\n\n\n
Merge awx.key<\/strong> and awx.crt<\/strong> files into a final certificate file called awx-self-signed-key.crt<\/strong> :<\/p>\n\n\n\n
# cd \/opt\/ansible-awx\/awx\/installer\/awx-ssl\n# cat awx.key  awx.crt > awx-self-signed-key.crt\n<\/code><\/pre>\n\n\n\n
Modify <\/strong>the Ansible AWX inventory file <\/strong>to configure our ssl certificate :<\/p>\n\n\n\n
# vi \/opt\/ansible-awx\/awx\/installer\/inventory<\/code><\/pre>\n\n\n\n
#host_port=80\nhost_port_ssl=443\nssl_certificate=\/opt\/ansible-awx\/awx\/installer\/awx-ssl\/awx-self-signed-key.crt<\/code><\/pre>\n\n\n\n
Relaunch Ansible AWX Installation Playbook :<\/strong><\/h3>\n\n\n\n
To reconfigure <\/strong>the web container<\/strong>(awx_web) with the SSL <\/strong>new parameters<\/strong>, it’s necessary to relaunch <\/strong>the installation <\/strong>command to apply all the changes into the container, more specifically, to modify the nginx web server configuration inside the container. <\/p>\n\n\n\n
Execute the following :<\/p>\n\n\n\n
# cd \/opt\/ansible-awx\/awx\/installer\n# ansible-playbook -i inventory install.yml\n<\/code><\/pre>\n\n\n\n
Now  the web container <\/strong>called awx_web<\/strong>, is configured with https<\/strong>, port 443<\/strong>.<\/p>\n\n\n\n
# docker ps\nCONTAINER ID        IMAGE                COMMAND                  CREATED             STATUS              PORTS                                         NAMES\n9d01d5daa7da        ansible\/awx:13.0.0   \"tini -- \/bin\/sh -c \u2026\"   10 minutes ago      Up 10 minutes        0.0.0.0:443<\/strong>->8053\/tcp   awx_web<\/strong><\/code><\/pre>\n\n\n\n
And the Ansible AWX instance can be accessible by https <\/strong>: <\/p>\n\n\n\n
https://[ANSIBLE_AWX_INSTANCE]<\/code><\/pre>\n\n\n\n
Quick verification<\/h3>\n\n\n\n
We can check just inside <\/strong>the awx_web container<\/strong>, and see that there is our certificate file but with the name awxweb.pem<\/strong> :<\/p>\n\n\n\n
Access to web container :<\/p>\n\n\n\n
# docker exec -ti awx_web \/bin\/bash\n<\/code><\/pre>\n\n\n\n
Check file certificate :<\/p>\n\n\n\n
# cd \/etc\/nginx\n# ls -l awxweb.pem\n<\/code><\/pre>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
Initial situation, HTTP : We have an standalone instance of Ansible AWX(Docker version) already installed in a CentOS linux machine. … More Ansible AWX: How to configure SSL\/HTTPs<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":1808,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[103,2],"tags":[106,111,114,113],"_links":{"self":[{"href":"https:\/\/robermb.com\/blog\/wp-json\/wp\/v2\/posts\/1783"}],"collection":[{"href":"https:\/\/robermb.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/robermb.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/robermb.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/robermb.com\/blog\/wp-json\/wp\/v2\/comments?post=1783"}],"version-history":[{"count":6,"href":"https:\/\/robermb.com\/blog\/wp-json\/wp\/v2\/posts\/1783\/revisions"}],"predecessor-version":[{"id":1802,"href":"https:\/\/robermb.com\/blog\/wp-json\/wp\/v2\/posts\/1783\/revisions\/1802"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/robermb.com\/blog\/wp-json\/wp\/v2\/media\/1808"}],"wp:attachment":[{"href":"https:\/\/robermb.com\/blog\/wp-json\/wp\/v2\/media?parent=1783"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/robermb.com\/blog\/wp-json\/wp\/v2\/categories?post=1783"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/robermb.com\/blog\/wp-json\/wp\/v2\/tags?post=1783"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}