测试的部署模型

下图显示了红帽已经测试过此部署模型的基础架构拓扑，供客户在自我管理 Ansible Automation Platform 时使用：

图 2.1. 基础架构拓扑图

每个虚拟机都已根据以下组件要求进行测试：

红帽已测试了以下配置来安装和运行 Red Hat Ansible Automation Platform：

Red Hat Ansible Automation Platform 使用多个端口与其服务进行通信。这些端口必须处于打开状态，并可用于 Red Hat Ansible Automation Platform 服务器的传入连接，以便它正常工作。确保这些端口可用，且服务器防火墙不会阻止。

使用示例清单文件为此拓扑执行安装：

# This is the Ansible Automation Platform installer inventory file intended for the RPM growth deployment topology.
# Consult the Ansible Automation Platform product documentation about this topology's tested hardware configuration.
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/tested_deployment_models/rpm-topologies
#
# Consult the docs if you are unsure what to add
# For all optional variables consult the Ansible Automation Platform documentation:
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/rpm_installation


# This section is for your platform gateway hosts
# -----------------------------------------------------
[automationgateway]
gateway.example.org

# This section is for your automation controller hosts
# -----------------------------------------------------
[automationcontroller]
controller.example.org

[automationcontroller:vars]
peers=execution_nodes

# This section is for your Ansible Automation Platform execution hosts
# -----------------------------------------------------
[execution_nodes]
exec.example.org

# This section is for your automation hub hosts
# -----------------------------------------------------
[automationhub]
hub.example.org

# This section is for your Event-Driven Ansible controller hosts
# -----------------------------------------------------
[automationedacontroller]
eda.example.org

# This section is for the Ansible Automation Platform database
# -----------------------------------------------------
[database]
db.example.org

[all:vars]

# Common variables
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/rpm_installation/appendix-inventory-files-vars#ref-general-inventory-variables
# -----------------------------------------------------
registry_username=<your RHN username>
registry_password=<your RHN password>

redis_mode=standalone

# Platform gateway
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/rpm_installation/appendix-inventory-files-vars#ref-gateway-variables
# -----------------------------------------------------
automationgateway_admin_password=<set your own>
automationgateway_pg_host=db.example.org
automationgateway_pg_password=<set your own>

# Automation controller
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/rpm_installation/appendix-inventory-files-vars#ref-controller-variables
# -----------------------------------------------------
admin_password=<set your own>
pg_host=db.example.org
pg_password=<set your own>

# Automation hub
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/rpm_installation/appendix-inventory-files-vars#ref-hub-variables
# -----------------------------------------------------
automationhub_admin_password=<set your own>
automationhub_pg_host=db.example.org
automationhub_pg_password=<set your own>

# Event-Driven Ansible controller
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/rpm_installation/appendix-inventory-files-vars#event-driven-ansible-controller
# -----------------------------------------------------
automationedacontroller_admin_password=<set your own>
automationedacontroller_pg_host=db.example.org
automationedacontroller_pg_password=<set your own>

下图显示了红帽已经测试过此部署模型的基础架构拓扑，供客户在自我管理 Ansible Automation Platform 时使用：

图 2.2. 基础架构拓扑图

每个虚拟机都已根据以下组件要求进行测试：

红帽已测试了以下配置来安装和运行 Red Hat Ansible Automation Platform：

Red Hat Ansible Automation Platform 使用多个端口与其服务进行通信。这些端口必须处于打开状态，并可用于 Red Hat Ansible Automation Platform 服务器的传入连接，以便它正常工作。确保这些端口可用，且服务器防火墙不会阻止。

使用示例清单文件为此拓扑执行安装：

# This is the Ansible Automation Platform installer inventory file intended for the mixed RPM growth deployment topology.
# Consult the Ansible Automation Platform product documentation about this topology's tested hardware configuration.
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/tested_deployment_models/rpm-topologies
#
# Consult the docs if you are unsure what to add
# For all optional variables consult the Red Hat documentation:
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/rpm_installation

# This section is for your platform gateway hosts
# -----------------------------------------------------
[automationgateway]
gateway.example.org

# This section is for your Event-Driven Ansible controller hosts
# -----------------------------------------------------
[automationedacontroller]
eda.example.org

# This section is for the Ansible Automation Platform database
# -----------------------------------------------------
[database]
db.example.org

[all:vars]

# Common variables
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/rpm_installation/appendix-inventory-files-vars#ref-general-inventory-variables
# -----------------------------------------------------
registry_username=<your RHN username>
registry_password=<your RHN password>

redis_mode=standalone

# Platform gateway
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/rpm_installation/appendix-inventory-files-vars#ref-gateway-variables
# -----------------------------------------------------
automationgateway_admin_password=<set your own>
automationgateway_pg_host=db.example.org
automationgateway_pg_password=<set your own>

# Event-Driven Ansible controller
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/rpm_installation/appendix-inventory-files-vars#event-driven-ansible-controller
# -----------------------------------------------------
automationedacontroller_admin_password=<set your own>
automationedacontroller_pg_host=db.example.org
automationedacontroller_pg_password=<set your own>

下图显示了红帽已经测试过此部署模型的基础架构拓扑，供客户在自我管理 Ansible Automation Platform 时使用：

图 2.3. 基础架构拓扑图

每个虚拟机都已根据以下组件要求进行测试：

红帽已测试了以下配置来安装和运行 Red Hat Ansible Automation Platform：

Red Hat Ansible Automation Platform 使用多个端口与其服务进行通信。这些端口必须处于打开状态，并可用于 Red Hat Ansible Automation Platform 服务器的传入连接，以便它正常工作。确保这些端口可用，且服务器防火墙不会阻止。

使用示例清单文件为此拓扑执行安装：

# This is the Ansible Automation Platform enterprise installer inventory file
# Consult the docs if you are unsure what to add
# For all optional variables consult the Red Hat documentation:
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/rpm_installation

# This section is for your platform gateway hosts
# -----------------------------------------------------
[automationgateway]
gateway1.example.org
gateway2.example.org

# This section is for your automation controller hosts
# -----------------------------------------------------
[automationcontroller]
controller1.example.org
controller2.example.org

[automationcontroller:vars]
peers=execution_nodes

# This section is for your Ansible Automation Platform execution hosts
# -----------------------------------------------------
[execution_nodes]
hop1.example.org node_type='hop'
exec1.example.org
exec2.example.org

# This section is for your automation hub hosts
# -----------------------------------------------------
[automationhub]
hub1.example.org
hub2.example.org

# This section is for your Event-Driven Ansible controller hosts
# -----------------------------------------------------
[automationedacontroller]
eda1.example.org
eda2.example.org

[redis]
gateway1.example.org
gateway2.example.org
hub1.example.org
hub2.example.org
eda1.example.org
eda2.example.org

[all:vars]
# Common variables
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/rpm_installation/appendix-inventory-files-vars#ref-general-inventory-variables
# -----------------------------------------------------
registry_username=<your RHN username>
registry_password=<your RHN password>

# Platform gateway
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/rpm_installation/appendix-inventory-files-vars#ref-gateway-variables
# -----------------------------------------------------
automationgateway_admin_password=<set your own>
automationgateway_pg_host=<set your own>
automationgateway_pg_database=<set your own>
automationgateway_pg_username=<set your own>
automationgateway_pg_password=<set your own>

# Automation controller
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/rpm_installation/appendix-inventory-files-vars#ref-controller-variables
# -----------------------------------------------------
admin_password=<set your own>
pg_host=<set your own>
pg_database=<set your own>
pg_username=<set your own>
pg_password=<set your own>

# Automation hub
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/rpm_installation/appendix-inventory-files-vars#ref-hub-variables
# -----------------------------------------------------
automationhub_admin_password=<set your own>
automationhub_pg_host=<set your own>
automationhub_pg_database=<set your own>
automationhub_pg_username=<set your own>
automationhub_pg_password=<set your own>

# Event-Driven Ansible controller
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/rpm_installation/appendix-inventory-files-vars#event-driven-ansible-controller
# -----------------------------------------------------
automationedacontroller_admin_password=<set your own>
automationedacontroller_pg_host=<set your own>
automationedacontroller_pg_database=<set your own>
automationedacontroller_pg_username=<set your own>
automationedacontroller_pg_password=<set your own>

下图显示了红帽已经测试过此部署模型的基础架构拓扑，供客户在自我管理 Ansible Automation Platform 时使用：

图 2.4. 基础架构拓扑图

每个虚拟机都已根据以下组件要求进行测试：

红帽已测试了以下配置来安装和运行 Red Hat Ansible Automation Platform：

Red Hat Ansible Automation Platform 使用多个端口与其服务进行通信。这些端口必须处于打开状态，并可用于 Red Hat Ansible Automation Platform 服务器的传入连接，以便它正常工作。确保这些端口可用，且服务器防火墙不会阻止。

使用示例清单文件为此拓扑执行安装：

# This is the Ansible Automation Platform mixed enterprise installer inventory file
# Consult the docs if you are unsure what to add
# For all optional variables consult the Red Hat documentation:
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/rpm_installation

# This section is for your platform gateway hosts
# -----------------------------------------------------
[automationgateway]
gateway1.example.org
gateway2.example.org
gateway3.example.org

# This section is for your Event-Driven Ansible controller hosts
# -----------------------------------------------------
[automationedacontroller]
eda1.example.org
eda2.example.org
eda3.example.org

[redis]
gateway1.example.org
gateway2.example.org
gateway3.example.org
eda1.example.org
eda2.example.org
eda3.example.org

[all:vars]
# Common variables
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/rpm_installation/appendix-inventory-files-vars#ref-general-inventory-variables
# -----------------------------------------------------
registry_username=<your RHN username>
registry_password=<your RHN password>

# Platform gateway
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/rpm_installation/appendix-inventory-files-vars#ref-gateway-variables
# -----------------------------------------------------
automationgateway_admin_password=<set your own>
automationgateway_pg_host=<set your own>
automationgateway_pg_database=<set your own>
automationgateway_pg_username=<set your own>
automationgateway_pg_password=<set your own>

# Event-Driven Ansible controller
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/rpm_installation/appendix-inventory-files-vars#event-driven-ansible-controller
# -----------------------------------------------------
automationedacontroller_admin_password=<set your own>
automationedacontroller_pg_host=<set your own>
automationedacontroller_pg_database=<set your own>
automationedacontroller_pg_username=<set your own>
automationedacontroller_pg_password=<set your own>

下图显示了红帽已经测试过此部署模型的基础架构拓扑，供客户在自我管理 Ansible Automation Platform 时使用：

图 3.1. 基础架构拓扑图

单个虚拟机已使用以下组件要求进行测试：

存储等资源可以根据部署的需求增加。

红帽已测试了以下配置来安装和运行 Red Hat Ansible Automation Platform：

Red Hat Ansible Automation Platform 使用多个端口与其服务进行通信。这些端口必须处于打开状态，并可用于 Red Hat Ansible Automation Platform 服务器的传入连接，以便它正常工作。确保这些端口可用，且服务器防火墙不会阻止。

使用示例清单文件为此拓扑执行安装：

# This is the Ansible Automation Platform installer inventory file intended for the container growth deployment topology.
# This inventory file expects to be run from the host where Ansible Automation Platform will be installed.
# Consult the Ansible Automation Platform product documentation about this topology's tested hardware configuration.
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/tested_deployment_models/container-topologies
#
# Consult the docs if you are unsure what to add
# For all optional variables consult the included README.md
# or the Ansible Automation Platform documentation:
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/containerized_installation

# This section is for your platform gateway hosts
# -----------------------------------------------------
[automationgateway]
aap.example.org

# This section is for your automation controller hosts
# -----------------------------------------------------
[automationcontroller]
aap.example.org

# This section is for your automation hub hosts
# -----------------------------------------------------
[automationhub]
aap.example.org

# This section is for your Event-Driven Ansible controller hosts
# -----------------------------------------------------
[automationeda]
aap.example.org

# This section is for the Ansible Automation Platform database
# -----------------------------------------------------
[database]
aap.example.org

[all:vars]
# Ansible
ansible_connection=local

# Common variables
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/containerized_installation/appendix-inventory-files-vars#ref-general-inventory-variables
# -----------------------------------------------------
postgresql_admin_username=postgres
postgresql_admin_password=<set your own>

registry_username=<your RHN username>
registry_password=<your RHN password>

redis_mode=standalone

# Platform gateway
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/containerized_installation/appendix-inventory-files-vars#ref-gateway-variables
# -----------------------------------------------------
gateway_admin_password=<set your own>
gateway_pg_host=aap.example.org
gateway_pg_password=<set your own>

# Automation controller
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/containerized_installation/appendix-inventory-files-vars#ref-controller-variables
# -----------------------------------------------------
controller_admin_password=<set your own>
controller_pg_host=aap.example.org
controller_pg_password=<set your own>
controller_percent_memory_capacity=0.5

# Automation hub
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/containerized_installation/appendix-inventory-files-vars#ref-hub-variables
# -----------------------------------------------------
hub_admin_password=<set your own>
hub_pg_host=aap.example.org
hub_pg_password=<set your own>
hub_seed_collections=false

# Event-Driven Ansible controller
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/containerized_installation/appendix-inventory-files-vars#event-driven-ansible-controller
# -----------------------------------------------------
eda_admin_password=<set your own>
eda_pg_host=aap.example.org
eda_pg_password=<set your own>

只有在远程主机上安装时，才需要 SSH 密钥。如果进行一个基于本地虚拟机的安装，您可以使用 ansible_connection=local。

下图显示了红帽已经测试过此部署模型的基础架构拓扑，供客户在自我管理 Ansible Automation Platform 时使用：

图 3.2. 基础架构拓扑图

每个虚拟机都已根据以下组件要求进行测试：

红帽已测试了以下配置来安装和运行 Red Hat Ansible Automation Platform：

Red Hat Ansible Automation Platform 使用多个端口与其服务进行通信。这些端口必须处于打开状态，并可用于 Red Hat Ansible Automation Platform 服务器的传入连接，以便它正常工作。确保这些端口可用，且服务器防火墙不会阻止。

使用示例清单文件为此拓扑执行安装：

# This is the Ansible Automation Platform enterprise installer inventory file
# Consult the docs if you are unsure what to add
# For all optional variables consult the included README.md
# or the Red Hat documentation:
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/containerized_installation

# This section is for your platform gateway hosts
# -----------------------------------------------------
[automationgateway]
gateway1.example.org
gateway2.example.org

# This section is for your automation controller hosts
# -----------------------------------------------------
[automationcontroller]
controller1.example.org
controller2.example.org

# This section is for your Ansible Automation Platform execution hosts
# -----------------------------------------------------
[execution_nodes]
hop1.example.org receptor_type='hop'
exec1.example.org
exec2.example.org

# This section is for your automation hub hosts
# -----------------------------------------------------
[automationhub]
hub1.example.org
hub2.example.org

# This section is for your Event-Driven Ansible controller hosts
# -----------------------------------------------------
[automationeda]
eda1.example.org
eda2.example.org

[redis]
gateway1.example.org
gateway2.example.org
hub1.example.org
hub2.example.org
eda1.example.org
eda2.example.org

[all:vars]

# Common variables
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/containerized_installation/appendix-inventory-files-vars#ref-general-inventory-variables
# -----------------------------------------------------
postgresql_admin_username=<set your own>
postgresql_admin_password=<set your own>
registry_username=<your RHN username>
registry_password=<your RHN password>

# Platform gateway
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/containerized_installation/appendix-inventory-files-vars#ref-gateway-variables
# -----------------------------------------------------
gateway_admin_password=<set your own>
gateway_pg_host=externaldb.example.org
gateway_pg_database=<set your own>
gateway_pg_username=<set your own>
gateway_pg_password=<set your own>

# Automation controller
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/containerized_installation/appendix-inventory-files-vars#ref-controller-variables
# -----------------------------------------------------
controller_admin_password=<set your own>
controller_pg_host=externaldb.example.org
controller_pg_database=<set your own>
controller_pg_username=<set your own>
controller_pg_password=<set your own>

# Automation hub
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/containerized_installation/appendix-inventory-files-vars#ref-hub-variables
# -----------------------------------------------------
hub_admin_password=<set your own>
hub_pg_host=externaldb.example.org
hub_pg_database=<set your own>
hub_pg_username=<set your own>
hub_pg_password=<set your own>

# Event-Driven Ansible controller
# https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/containerized_installation/appendix-inventory-files-vars#event-driven-ansible-controller
# -----------------------------------------------------
eda_admin_password=<set your own>
eda_pg_host=externaldb.example.org
eda_pg_database=<set your own>
eda_pg_username=<set your own>
eda_pg_password=<set your own>

下图显示了红帽已经测试过此部署模型的基础架构拓扑，供客户在自我管理 Ansible Automation Platform 时使用：

图 4.1. 基础架构拓扑图

单一节点 OpenShift (SNO)集群已使用以下要求进行测试：32 GB RAM、16 个 CPU、128 GB 本地磁盘和 3000 IOPS。

红帽已测试了以下配置来安装和运行 Red Hat Ansible Automation Platform：

使用以下示例自定义资源(CR)将 Ansible Automation Platform 实例添加到项目中：

apiVersion: aap.ansible.com/v1alpha1
kind: AnsibleAutomationPlatform
metadata:
  name: <aap instance name>
spec:
  eda:
    automation_server_ssl_verify: 'no'
  hub:
    storage_type: 's3'
    object_storage_s3_secret: '<name of the Secret resource holding s3 configuration>'

Ansible Automation Platform 的性能特性和容量受到资源分配和配置的影响。使用 OpenShift 时，每个 Ansible Automation Platform 组件都部署为 pod。您可以为每个 pod 指定资源请求和限值。

使用 Ansible Automation Platform 自定义资源(CR)为 OpenShift 安装配置资源分配。每个可配置的项目都有默认设置。这些设置是安装的最低要求，但可能无法满足您的生产工作负载需求。

默认情况下，每个组件的部署会针对最小资源请求设置，但不会设置资源限值。OpenShift 仅调度带有可用资源请求的 pod，但 pod 允许消耗无限的 RAM 或 CPU，只要 OpenShift 工作程序节点本身不在节点压力下。

在 Operator 增长拓扑中，Ansible Automation Platform 部署到具有 32 GB RAM、16 个 CPU、128 GB 本地磁盘和 3000 IOPS 的单节点 OpenShift (SNO)上。这并不是一个共享的环境，因此 Ansible Automation Platform pod 对 OpenShift SNO 的所有计算资源具有完全访问权限。在这种情况下，自动化控制器任务 pod 的容量计算派生自运行 pod 的底层 OpenShift Container Platform 节点。它无法访问整个节点。此容量计算会影响自动化控制器可以运行的并发作业数量。

OpenShift 管理与虚拟机不同的存储。这会影响自动化中心存储其工件的方式。在 Operator 增长拓扑中，我们使用 S3 存储，因为自动化中心需要一个 ReadWriteMany 类型存储，这不是 OpenShift 中的默认存储类型。

Red Hat Ansible Automation Platform 使用多个端口与其服务进行通信。这些端口必须处于打开状态，并可用于 Red Hat Ansible Automation Platform 服务器的传入连接，以便它正常工作。确保这些端口可用，且服务器防火墙不会阻止。

下图显示了红帽已经测试过此部署模型的基础架构拓扑，供客户在自我管理 Ansible Automation Platform 时使用：

图 4.2. 基础架构拓扑图

以下基础架构拓扑描述了具有 3 个主节点和 2 个 worker 节点的 OpenShift 集群。

每个 OpenShift Worker 节点都根据以下组件要求进行测试：16 GB RAM、4 个 CPU、128 GB 本地磁盘和 3000 IOPS。

红帽已测试了以下配置来安装和运行 Red Hat Ansible Automation Platform：

Ansible Automation Platform 的性能特性和容量受到资源分配和配置的影响。使用 OpenShift 时，每个 Ansible Automation Platform 组件都部署为 pod。您可以为每个 pod 指定资源请求和限值。

使用 Ansible Automation Platform 自定义资源为 OpenShift 安装配置资源分配。每个可配置的项目都有默认设置。这些设置是本参考部署架构上下文中所使用的确切配置，假设环境由企业 IT 组织部署和管理，用于生产目的。

默认情况下，每个组件的部署会针对最小资源请求设置，但不会设置资源限值。OpenShift 仅调度带有可用资源请求的 pod，但 pod 允许消耗无限的 RAM 或 CPU，只要 OpenShift 工作程序节点本身不在节点压力下。

在 Operator 企业拓扑中，Ansible Automation Platform 部署到带有 2 t3.xlarge worker 节点的 Red Hat OpenShift on AWS (ROSA) Hosted Control Plane (HCP)集群，在单个 AWS 区域内分布在 2 个 AZ 中。这并不是一个共享的环境，因此 Ansible Automation Platform pod 可以完全访问 ROSA HCP 集群的所有计算资源。在这种情况下，自动化控制器任务 pod 的容量计算派生自运行 pod 的底层 HCP worker 节点。它无法访问整个节点的 CPU 或内存资源。此容量计算会影响自动化控制器可以运行的并发作业数量。

OpenShift 管理与虚拟机不同的存储。这会影响自动化中心存储其工件的方式。在 Operator 企业拓扑中，我们使用 S3 存储，因为自动化中心需要一个 ReadWriteMany 类型存储，这不是 OpenShift 中的默认存储类型。外部为自动化中心提供 Redis、PostgreSQL 和对象存储。这为 Ansible Automation Platform 部署提供了额外的可扩展性和可靠性功能，包括特殊的备份、恢复以及复制服务和可扩展存储。

Red Hat Ansible Automation Platform 使用多个端口与其服务进行通信。这些端口必须处于打开状态，并可用于 Red Hat Ansible Automation Platform 服务器的传入连接，以便它正常工作。确保这些端口可用，且服务器防火墙不会阻止。