Red Hat Summit Red Hat SummitSupportConsoleDevelopersStart a trialContact

Chapter 2. Installing a high availability automation hub

Configure the Ansible Automation Platform installer to install automation hub in a highly available (HA) configuration. Install HA automation hub on SELinux by creating mount points and adding the appropriate SELinux contexts to your Ansible Automation Platform environment.

2.1. Highly available automation hub installation
Copy link

Install a highly available automation hub by making the following changes to the inventory file in the Ansible Automation Platform installer, then running the ./setup.sh script:

Specify database host IP

Specify the IP address for your database host, using the automation_pg_host and automation_pg_port fields. For example: 

automationhub_pg_host='192.0.2.10'
automationhub_pg_port='5432'
Copy to Clipboard Toggle word wrap

also specify the IP address for your database host in the [database] section, using the value in the automationhub_pg_port field: 

[database]
192.0.2.10
Copy to Clipboard Toggle word wrap

List all instances in a clustered setup

If installing a clustered setup, replace localhost ansible_connection=local in the [automationhub] section with the hostname or IP of all instances. For example: 

[automationhub]
automationhub1.testing.ansible.com ansible_user=cloud-user ansible_host=192.0.2.18
automationhub2.testing.ansible.com ansible_user=cloud-user ansible_host=192.0.2.20
automationhub3.testing.ansible.com ansible_user=cloud-user ansible_host=192.0.2.22
Copy to Clipboard Toggle word wrap

Red Hat Single Sign-On requirements

If you are implementing Red Hat Single Sign-On on your automation hub environment, specify the main automation hub URL that clients will connect to, using the automationhub_main_url field. For example: 

automationhub_main_url = 'https://automationhub.ansible.com'
Copy to Clipboard Toggle word wrap
Note

If automationhub_main_url is not specified, the first node in the [automationhub] group will be used as default.

To set up a high availability (HA) deployment of automation hub on SELinux, create two mount points for /var/lib/pulp and /var/lib/pulp/pulpcore_static, then assign the appropriate SELinux contexts to each. You must add the context for /var/lib/pulp/pulpcore_static and run the Ansible Automation Platform installer before adding the context for /var/lib/pulp.

Prerequisites

  • You have already configured a NFS export on your server.

Pre-installation procedure

  1. Create a mount point at /var/lib/pulp: 

    $ mkdir /var/lib/pulp/
    Copy to Clipboard Toggle word wrap

  2. Open /etc/fstab using a text editor, then add the following values: 

    srv_rhel8:/data /var/lib/pulp nfs defaults,_netdev,nosharecache 0 0
srv_rhel8:/data/pulpcore_static /var/lib/pulp/pulpcore_static nfs defaults,_netdev,nosharecache,context="system_u:object_r:httpd_sys_content_rw_t:s0" 0 0
    Copy to Clipboard Toggle word wrap

  3. Run the mount command for /var/lib/pulp: 

    $ mount /var/lib/pulp
    Copy to Clipboard Toggle word wrap

  4. Create a mount point at /var/lib/pulp/pulpcore_static: 

    $ mkdir /var/lib/pulp/pulpcore_static
    Copy to Clipboard Toggle word wrap

  5. Run the mount command: 

    $ mount -a
    Copy to Clipboard Toggle word wrap

  6. With the mount points set up, run the Ansible Automation Platform installer: 

    $ setup.sh -- -b --become-user root
    Copy to Clipboard Toggle word wrap

Once the installation is complete, unmount the /var/lib/pulp/ mount point then apply the appropriate SELinux context:

Post-installation procedure

  1. Shut down the Pulp service: 

    $ systemctl stop pulpcore.service
    Copy to Clipboard Toggle word wrap

  2. Unmount /var/lib/pulp/pulpcore_static: 

    $ umount /var/lib/pulp/pulpcore_static
    Copy to Clipboard Toggle word wrap

  3. Unmount /var/lib/pulp/: 

    $ umount /var/lib/pulp/
    Copy to Clipboard Toggle word wrap

  4. Open /etc/fstab using a text editor, then replace the existing value for /var/lib/pulp with the following: 

    srv_rhel8:/data /var/lib/pulp nfs defaults,_netdev,nosharecache,context="system_u:object_r:pulpcore_var_lib_t:s0" 0 0
    Copy to Clipboard Toggle word wrap

  5. Run the mount command: 

    $ mount -a
    Copy to Clipboard Toggle word wrap

Configure pulpcore.service:

  1. With the two mount points set up, shut down the Pulp service to configure pulpcore.service: 

    $ systemctl stop pulpcore.service
    Copy to Clipboard Toggle word wrap

  2. Edit pulpcore.service using systemctl: 

    $ systemctl edit pulpcore.service
    Copy to Clipboard Toggle word wrap

  3. Add the following entry to pulpcore.service to ensure that automation hub services starts only after starting the network and mounting the remote mount points: 

    [Unit]
After=network.target var-lib-pulp.mount
    Copy to Clipboard Toggle word wrap

  4. Enable remote-fs.target: 

    $ systemctl enable remote-fs.target
    Copy to Clipboard Toggle word wrap

  5. Reboot the system: 

    $ systemctl reboot
    Copy to Clipboard Toggle word wrap

Troubleshooting

A bug in the pulpcore SELinux policies can cause the token authentication public/private keys in etc/pulp/certs/ to not have the proper SELinux labels, causing the pulp process to fail. When this occurs, run the following command to temporarily attach the proper labels: 

$ chcon system_u:object_r:pulpcore_etc_t:s0 /etc/pulp/certs/token_{private,public}_key.pem
Copy to Clipboard Toggle word wrap
Note

You must repeat this command to reattach the proper SELinux labels whenever you relabel your system.

Additional Resources

Back to top
Red Hat logoGithubredditYoutubeTwitter

Learn

Try, buy, & sell

Communities

About Red Hat Documentation

We help Red Hat users innovate and achieve their goals with our products and services with content they can trust. Explore our recent updates.

Making open source more inclusive

Red Hat is committed to replacing problematic language in our code, documentation, and web properties. For more details, see the Red Hat Blog.

About Red Hat

We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

Theme

© 2025 Red Hat