9. 9
Playbooks are executed in a CHROOT environment as the AWX
user. Cannot access other data.
Full RBAC security model for every item within AWX. This means
you can tie yourself in knots if you’re not careful.
SECURITY
10. 10
SECURITY
Organization
Team
Notifcations Users Permissions
Inventories Templates Projects
Workfows Admins
Top level construct allows
for multi tenant topologies
Teams are an optional construct to
allow groups within an organization
to collaborate
Each of the items at this level can be
assigned to a team or an organization
When assigned, a role specifc to the
item can be chosen (i.e. execute only
or view only)
13. 13
Comparable to Ansible inventory fles.
Can have multiple inventories.
Dynamic sync with AWS, GCE, Azure, Rackspace etc.
Write your own custom inventory scripts (just in case you have
AS/400)
INVENTORIES
16. 16
TEMPLATES / JOBS
Collection of playbooks (usually in SCM).
Template is the defnition of a playbook (i.e. which playbook to
use, credentials to use, variables etc)
A Job is the output of a template run. Job output is saved so that
you can review it later.
A Workfow is a way to string together multiple playbooks.
21. 21
Notifcations
You can have notifcations at
the end of jobs to:
Slack
Irc
Hipchat
Email
Rocketchat
Pagerduty
Twilio
Mattermost
etc...
22. 22
Credentials
Credentials can be
different types.
All the major ones are
supported.
Machine, network, AWS,
Azure, GCE etc…
Custom credentials are
also supported (for your
AS/400)
23. 23
Credentials
Credentials can be
different types.
All the major ones are
supported.
Machine, network, AWS,
Azure, GCE etc…
Custom credentials are
also supported (for your
AS/400)
24. 24
REST API
You can do this:
curl -H 'Content-type: application/json'
-d '{"extra_vars":{"target_hosts":"all"}}'
-u admin:password
http://172.17.0.5:8052
….but why?
26. 26
HOW TO INSTALL
AWX by default installs in to the following platforms:
Docker
Kubernetes
OpenShift
You can run a separate postgres database….. or use the default in built one.
The default install is in containers
