RHBA-2023:5347 - Bug Fix Advisory

Topic

An update is now available for Red Hat Ansible Automation Platform 2.4

Description

Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.

Installer, setup and setup bundle have been updated to 2.4-2 to include the following changes:

• Podman configurations now correctly aligned to EDA's home directory (AAP-13289)
• Fixed restore failing to stop pulpcore-worker services on RHEL 9 (AAP-13297)
• Fixed awx-rsyslogd process that starts with the wrong user (AAP-13664)
• Inventory file updated to include SSL key and certificate parameters for provided SSL web certificates (AAP-13854)
• Fixed postgres sslmode for verify-full for external postgres, and for postgres signed for 127.0.0.1 for internally managed postgres (AAP-13962)
• Subject alt names for component hosts will only be checked for signing certificates when https is enabled (AAP-14235)
• Fixed values used for signing installer managed certificates for internal postgres installations (AAP-14236)
• Fixed the linger configuration for EDA user (AAP-14745)
• You can now mount /var/lib/awx directory as a separate filesystem on execution nodes (AAP-15065)
• awx user configuration now supports rootless podman (AAP-15072)
• You are now able to sync execution environment images in automation hub to automation controller on upgrade (AAP-15121)
• Installer correctly enforces only 1 EDA host per AAP installation (AAP-15122)
• New variables are added for additional nginx configurations per component (AAP-15124)
• Added temporary file cleanup for podman to prevent 'cannot re-exec process' error during job execution (AAP-15248)
• Installer will now properly generate a new SECRET_KEY for controller when running setup.sh with '-k' option (AAP-15565)

Additionally, setup bundle 2.4-2 includes the updates released in the following advisories:

RHSA-2023:5208

• ansible-core 2.15.4
• ansible-runner 2.3.4
• automation-controller 4.4.4
• python3-django/python39-django 3.2.21

RHBA-2023:5271

• automation-hub 4.7.3
• python3-galaxy-ng/python3-galaxy-ng 4.7.3
• python3-pulp-ansible/python3-pulp-ansible 0.17.4

RHBA-2023:5316

• container images

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Ansible Automation Platform 2.4 for RHEL 9 x86_64
• Red Hat Ansible Automation Platform 2.4 for RHEL 9 s390x
• Red Hat Ansible Automation Platform 2.4 for RHEL 9 ppc64le
• Red Hat Ansible Automation Platform 2.4 for RHEL 9 aarch64
• Red Hat Ansible Automation Platform 2.4 for RHEL 8 x86_64
• Red Hat Ansible Automation Platform 2.4 for RHEL 8 s390x
• Red Hat Ansible Automation Platform 2.4 for RHEL 8 ppc64le
• Red Hat Ansible Automation Platform 2.4 for RHEL 8 aarch64

Fixes

CVEs

(none)

References

• https://access.redhat.com/errata/RHSA-2023:5208
• https://access.redhat.com/errata/RHBA-2023:5271
• https://access.redhat.com/errata/RHBA-2023:5316