第4章 OpenShift Container Platform での Ansible Automation Controller の設定

手順

1. AutomationController 仕様で、RECEPTOR_KUBE_SUPPORT_RECONNECT を有効にします。

   apiVersion: automationcontroller.ansible.com/v1beta1
   kind: AutomationController
   metadata:
     ...
   spec:
     ...
     ee_extra_env: |
       - name: RECEPTOR_KUBE_SUPPORT_RECONNECT
         value: enabled
       ```

2. AutomationController 仕様で、グレースフル終了機能を有効にします。

   termination_grace_period_seconds: <time to wait for job to finish>

3. Web およびタスク Pod 用に podAntiAffinity を設定し、AutomationController 仕様でデプロイメントを分散します。

   task_affinity:
       podAntiAffinity:
         preferredDuringSchedulingIgnoredDuringExecution:
         - podAffinityTerm:
             labelSelector:
               matchExpressions:
               - key: app.kubernetes.io/name
                 operator: In
                 values:
                 - awx-task
             topologyKey: topology.kubernetes.io/zone
           weight: 100
     web_affinity:
       podAntiAffinity:
         preferredDuringSchedulingIgnoredDuringExecution:
         - podAffinityTerm:
             labelSelector:
               matchExpressions:
               - key: app.kubernetes.io/name
                 operator: In
                 values:
                 - awx-web
             topologyKey: topology.kubernetes.io/zone
           weight: 100

4. OpenShift Container Platform で PodDisruptionBudget を設定します。

   ---
   apiVersion: policy/v1
   kind: PodDisruptionBudget
   metadata:
     name: automationcontroller-job-pods
   spec:
     maxUnavailable: 0
     selector:
       matchExpressions:
         - key: ansible-awx-job-id
           operator: Exists
   ---
   apiVersion: policy/v1
   kind: PodDisruptionBudget
   metadata:
     name: automationcontroller-web-pods
   spec:
     minAvailable: 1
     selector:
       matchExpressions:
         - key: app.kubernetes.io/name
           operator: In
           values:
             - <automationcontroller_instance_name>-web
   ---
   apiVersion: policy/v1
   kind: PodDisruptionBudget
   metadata:
     name: automationcontroller-task-pods
   spec:
     minAvailable: 1
     selector:
       matchExpressions:
         - key: app.kubernetes.io/name
           operator: In
           values:
             - <automationcontroller_instance_name>-task