Ansible Automation Architect @ Red Hat

less than 1 minute read

AAP Controller does not read system PKI directory. So adding CA cert to /etc/pki/ca-trust/source/anchors directory and run update-ca-trust is not enough. It will still return SSL error when pulling execution image, for example.

Add the following into /etc/supervisord.d/tower.ini file:

[supervisord]
...
environment=REQUESTS_CA_BUNDLE=/etc/pki/ca-trust/source/anchors/lets-encrypt-r3.pem
...

Then restart

automation-controller-service restart supervisord

Leave a comment

You may also enjoy

Automation Hub Private Repository

1 minute read

Background We want to allow users to create they own collection under company namespace, but not sharing with the rest of the Hub users

Use Kerberos for AAP PostgreSQL Connection

2 minute read

We have Red Hat Identity Management (IdM) setup in the lab to provide Kerberos authentication. This how-to will demonstrate setting up AAP to connect to its...