General variables

backup_dir

Directory used to store backup files.

Optional

~/backups

bundle_dir

Path to the bundle directory used when performing a bundle install.

Required if bundle_install=true

<current_dir>/bundle.

bundle_install

Controls whether or not to perform an offline or bundled installation. Set this variable to true to enable an offline or bundled installation.

Optional

false if using the setup installation program. true if using the setup bundle installation program.

ca_tls_cert

Path to the user-provided CA certificate file. When you specify this variable, the installation program automatically generates TLS certificates for each Ansible Automation Platform service signed by this CA. You do not need to define individual service certificate variables (such as gateway_tls_cert, controller_tls_cert, or hub_tls_cert).

Optional

ca_tls_key

Path to the key file for the CA certificate provided in ca_tls_cert. The installation program uses this key to sign the automatically generated TLS certificates for each Ansible Automation Platform service.

Optional

ca_tls_key_passphrase

Passphrase used to decrypt the key provided in ca_tls_key.

Optional

ca_tls_remote

Denote whether the CA certificate files are local to the installation program (false) or on the remote component server (true).

Optional

false

client_request_timeout

Sets the HTTP timeout for end-user requests. The minimum value is 10 seconds.

Optional

30

container_compress

Compression software to use for compressing container images.

Optional

gzip

container_keep_images

Controls whether or not to keep container images when uninstalling Ansible Automation Platform. Set to true to keep container images when uninstalling Ansible Automation Platform.

Optional

false

container_pull_images

Controls whether or not to pull newer container images during installation. Set to false to prevent pulling newer container images during installation.

Optional

true

custom_ca_cert

Path to the custom CA certificate file. Use this variable when you have manually provided TLS certificates for Ansible Automation Platform services (such as gateway_tls_cert, controller_tls_cert, or hub_tls_cert) that are signed by a custom CA. This variable adds the CA certificate to the environment to ensure proper authentication and trust of the manually provided certificates. This variable is not needed when using ca_tls_cert and ca_tls_key, which automatically generate TLS certificates.

Optional

images_tmp_dir

The directory where the installation program temporarily stores container images during installation.

Optional

The system's temporary directory.

pcp_firewall_zone

The firewall zone where Performance Co-Pilot related firewall rules are applied. This controls which networks can access Performance Co-Pilot based on the zone's trust level.

Optional

public

pcp_use_archive_compression

Controls whether archive compression is enabled or disabled for Performance Co-Pilot. You can control this functionality globally by using use_archive_compression.

Optional

true

registry_auth

Controls whether to use registry authentication. When set to true, registry_username and registry_password are required. Not applicable for disconnected (bundled) installations.

Optional

true

registry_ns_aap

Ansible Automation Platform registry namespace.

Optional

ansible-automation-platform-27

registry_ns_rhel

RHEL registry namespace.

Optional

rhel9

registry_password

Password credential for access to the registry source defined in registry_url.

Required for online installations if registry_auth=true. Not required for disconnected installations.

registry_tls_verify

Controls whether SSL/TLS certificate verification is enabled or disabled when making HTTPS requests.

Optional

true

registry_url

URL of the registry source from which to pull execution environment images.

Optional

registry.redhat.io

registry_username

Username credential for access to the registry source defined in registry_url.

Required for online installations if registry_auth=true. Not required for disconnected installations.

routable_hostname

Used if the machine running the installation program can only route to the target host through a specific URL. For example, if you use short names in your inventory, but the node running the installation program can only resolve that host by using a FQDN. If routable_hostname is not set, it defaults to ansible_host. If you do not set ansible_host, inventory_hostname is used as a last resort. This variable is used as a host variable for particular hosts and not under the [all:vars] section.

Optional

setup_monitoring

Set to true to enable Performance Co-Pilot for system performance monitoring and data collection on Ansible Automation Platform control plane nodes.

Optional

false

use_archive_compression

Controls at a global level whether the filesystem-related backup files are compressed before being sent to the host to run the backup operation. If set to true, a tar.gz file is generated on each Ansible Automation Platform host and then gzip compression is used. If set to false, a simple tar file is generated. You can control this functionality at a component level by using the _use_archive_compression variables.

Optional

true

use_db_compression

Controls at a global level whether the database-related backup files are compressed before being sent to the host to run the backup operation. You can control this functionality at a component level by using the _use_db_compression variables.

Optional

true