v25.0.1

Automation Platform 25.0.1

Important

Re-tagged release: Removal of trademark logo and references of the company

This is the first major release after the project expansion from awx-without-k8s into Automation Platform.

The project is no longer only an AWX-on-Docker-Compose deployment helper. It now provides a community, open-source build of the broader Ansible Automation Platform experience: AWX/controller, Event-Driven Ansible, Gateway, supporting container images, Kubernetes operators, Helm charts, TLS/CA automation, and platform API modules.

What's New

• Project renamed and repositioned as Automation Platform.
• New full platform demo topology with Gateway + AWX + EDA.
• New standalone demo topologies for:
  • AWX standalone
  • EDA standalone
• New Docker Compose roles:
  • gateway
  • eda
  • tls
  • haproxy
• Refactored AWX role with updated TLS handling, image paths, runtime configuration, and Gateway integration support.
• Added shared AP root CA handling through the tls role.
• Added Gateway post-install and migration tasks for service/resource registration.
• Added new image build trees for:
  • AWX
  • AWX EE
  • EDA server
  • EDA UI
  • EDA decision environment
  • Gateway
  • MCP server
  • AWX operator
  • EDA server operator
  • AWX resource operator
  • AP Gateway operator
  • Ansible AI Connect operator
• Added Helm charts for:
  • awx-operator
  • eda-server-operator
  • ap-gateway-operator
  • awx-resource-operator
  • mcp-operator
• Added CRDs, sample manifests, and patch/build scripts for operator images.
• Updated README with new screenshots, topology docs, CA generation, image build docs, Helm chart usage, and component removal notes.

Breaking Changes / Migration Notes

• Repository URL changes from fitbeard/awx-without-k8s to fitbeard/automation-platform.

• The Ansible Galaxy collection name remains fitbeard.awx, but the project scope is now broader than AWX.

• Default image paths changed from the old quay.io/tadas/... layout to:

  • quay.io/fitbeard/automation-platform/...

• The old demo entrypoint was removed:

  • demo/inventory
  • demo/demo.yml

  Use one of the new topology-specific playbooks instead:

  • demo/inventory-gateway + demo/playbook-gateway.yml
  • demo/inventory-awx-standalone + demo/playbook-awx-standalone.yml
  • demo/inventory-eda-standalone + demo/playbook-eda-standalone.yml

• Build layout changed:

  • old build/ content moved under images/awx
  • old ee/ content moved under images/awx-ee

• AWX web TLS variables changed. Review old awx_web_cert_* usage and migrate to the newer TLS variables and shared AP CA flow.

• AWX Receptor mesh certificates are still separate from the platform/root CA and must be generated/configured independently.

• awx_pg_sslmode now defaults to require; external database users should review Postgres TLS settings before upgrading.

• This release requires Ansible Core >=2.17.0; project tooling currently targets Ansible Core <2.20.0.

• The bundled haproxy role is intended for demo/testing only. Production deployments should use a real load balancer, ingress controller, or platform edge service.

Notes

• Helm charts do not install CRDs automatically. Apply the matching CRDs from images/*/crds before installing charts.
• The AP Gateway operator image build requires access to the source-bundle OCI image.
• As this is the first broad platform release, review defaults and inventory carefully before upgrading an existing AWX-only deployment.

v25.0.0

Automation Platform 25.0.0

This is the first major release after the project expansion from awx-without-k8s into Automation Platform.

The project is no longer only an AWX-on-Docker-Compose deployment helper. It now provides a community, open-source build of the broader Ansible Automation Platform experience: AWX/controller, Event-Driven Ansible, Gateway, supporting container images, Kubernetes operators, Helm charts, TLS/CA automation, and platform API modules.

What's New

• Project renamed and repositioned as Automation Platform.
• New full platform demo topology with Gateway + AWX + EDA.
• New standalone demo topologies for:
  • AWX standalone
  • EDA standalone
• New Docker Compose roles:
  • gateway
  • eda
  • tls
  • haproxy
• Refactored AWX role with updated TLS handling, image paths, runtime configuration, and Gateway integration support.
• Added shared AP root CA handling through the tls role.
• Added Gateway post-install and migration tasks for service/resource registration.
• Added new image build trees for:
  • AWX
  • AWX EE
  • EDA server
  • EDA UI
  • EDA decision environment
  • Gateway
  • MCP server
  • AWX operator
  • EDA server operator
  • AWX resource operator
  • AP Gateway operator
  • Ansible AI Connect operator
• Added Helm charts for:
  • awx-operator
  • eda-server-operator
  • ap-gateway-operator
  • awx-resource-operator
  • mcp-operator
• Added CRDs, sample manifests, and patch/build scripts for operator images.
• Updated README with new screenshots, topology docs, CA generation, image build docs, Helm chart usage, and component removal notes.

Breaking Changes / Migration Notes

• Repository URL changes from fitbeard/awx-without-k8s to fitbeard/automation-platform.

• The Ansible Galaxy collection name remains fitbeard.awx, but the project scope is now broader than AWX.

• Default image paths changed from the old quay.io/tadas/... layout to:

  • quay.io/fitbeard/automation-platform/...

• The old demo entrypoint was removed:

  • demo/inventory
  • demo/demo.yml

  Use one of the new topology-specific playbooks instead:

  • demo/inventory-gateway + demo/playbook-gateway.yml
  • demo/inventory-awx-standalone + demo/playbook-awx-standalone.yml
  • demo/inventory-eda-standalone + demo/playbook-eda-standalone.yml

• Build layout changed:

  • old build/ content moved under images/awx
  • old ee/ content moved under images/awx-ee

• AWX web TLS variables changed. Review old awx_web_cert_* usage and migrate to the newer TLS variables and shared AP CA flow.

• AWX Receptor mesh certificates are still separate from the platform/root CA and must be generated/configured independently.

• awx_pg_sslmode now defaults to require; external database users should review Postgres TLS settings before upgrading.

• This release requires Ansible Core >=2.17.0; project tooling currently targets Ansible Core <2.20.0.

• The bundled haproxy role is intended for demo/testing only. Production deployments should use a real load balancer, ingress controller, or platform edge service.

Notes

• Helm charts do not install CRDs automatically. Apply the matching CRDs from images/*/crds before installing charts.
• The AP Gateway operator image build requires access to the source-bundle OCI image.
• As this is the first broad platform release, review defaults and inventory carefully before upgrading an existing AWX-only deployment.

v25.0.0-beta.2

feat: module cleaning for galaxy publishing (#221)

Signed-off-by: Tadas Sutkaitis <tadasas@gmail.com>

v25.0.0-beta.1

feat: update README (#220)

Signed-off-by: Tadas Sutkaitis <tadasas@gmail.com>

v24.6.330

Features

• feat: post 330 by @fitbeard in #179
• fix: install rpm2cpio and cpio by @fitbeard in #180
• fix: ui path by @fitbeard in #181

AWX 24.6.1 → AAP 2.6.5 (commit 03140796f620)

330 commits between tag 24.6.1 and commit 03140796f620966cdc4ff5052978c80a51c94ca7.

Source: GitHub comparison

New AWX Features

ESXi Inventory Plugin

• ESXi inventory plugin support (d35d7f62ec46)
• Logic to replace credential name when using ESXi (60114ab92943)

Azure Key Vault Managed Identity

• Azure Key Vault plugin updated to use Managed Identity (ba7ee2329828)

Credential sharing

• Credential sharing across organizations (ceb2eeccd1): Credentials can now be shared between organizations.

Redis

• Connection resilience (a49da9a19f): New REDIS_RETRY_COUNT, REDIS_BACKOFF_CAP, REDIS_BACKOFF_BASE
  settings for automatic retry on broken pipe.

Security Fixes

• CVE-2025-6176 (ec02f8b991)
• CVE-2025-66471: urllib3 upgraded to 2.6.3 (919022d624)
• Django 4.2.27 security update (e5db05ff3f)

Kubernetes Operator

New images (both AWX and EE) can also be used with awx-operator
but an external nginx.conf config compatible with this version should be used. See nginx.conf
for the reference.

Full Changelog: v24.6.281...v24.6.330

v24.6.281

Features

• Code cleanup and dependency update
• New build scripts for AWX and EE
• AWX and EE images for linux/amd64 and linux/arm64 platforms
• feat: update version number in docs and defaults by @fitbeard in #144
• feat: AWX resurection by @fitbeard in #169
• feat: split awx and ee build pipelines by @fitbeard in #175
• feat: bump ee image references by @fitbeard in #176

*** AWX resurrection ***

AWX 24.6.1 → AAP 2.6.1 (commit 05626248ce26)

281 commits between tag 24.6.1 and commit 05626248ce26fda2d64f311e494cfd146e7e4f2e.

Source: GitHub comparison

New AWX Features

GitHub App Authentication (Credential Plugin)

• New credential plugin for GitHub App authentication (9d9c125e470e)
• Allows x-access-token@<github-access-token> for git auth (9d9c125e470e)
• Adds PyGithub and PyNaCl dependencies (9d9c125e470e)

Security Fixes

• CVE-2024-33663: python-jose vulnerability (467024bc54a8)
• CVE-2024-21520: stringview vulnerability (bcd18e161cdb)
• CVE-2024-37891: urllib3 vulnerability (eb4f3c2864d3)
• CVE-2024-52304: aiohttp vulnerability (2c3b4ff5d786)
• CVE-2024-53908: Django vulnerability (b361aef0fbc5)
• CVE-2024-56201: Jinja2 vulnerability (a209751f22eb)
• CVE-2024-56374: Django vulnerability (2e8114394b91)
• CVE-2024-11407: grpcio vulnerability (df79fa4ae1a6)
• CVE-2025-47273: setuptools vulnerability (8fe4223eaccd)
• CVE-2025-48432: Django vulnerability (e3a9d9fbe8e8)
• CVE-2025-57833: Django 4.2.24 update (9e1025ce84f8)
• Jinja2 additional CVE fix (b5bc85e639c2)
• Django multiple CVE updates (8b293e704687, d1c85dae4ded, a238c5dd09da, 6a10e0ea5c2a)
• Prevent automountServiceAccountToken on K8s pods (15e28371ebb3)
• Prevent system auditor from downloading install bundle (1e6a7c074967)
• Django password validators now applied correctly (e060e44b0503)

Kubernetes Operator

New images (both AWX and EE) can also be used with awx-operator:

spec:
  image: quay.io/tadas/awx
  image_version: 24.6.1.post281
  control_plane_ee_image: quay.io/tadas/awx-ee:24.6.1.post281
  extra_settings:
    - setting: UI_NEXT
      value: "'False'"

Full Changelog: v24.6.2...v24.6.281

v24.6.2

Meta release for AWX 24.6.1 with code cleanup and dependency update

What's Changed

• feat: bump dependencies by @fitbeard in #137
• feat: refactor additional setup roles by @fitbeard in #138
• feat: switch to docker compose v2 by @fitbeard in #139
• feat: set default python for demo env by @fitbeard in #140
• feat: rename misleading awx-ee container to awx-receptor by @fitbeard in #141
• feat: allow additional volumes for receptor container by @fitbeard in #142
• feat: make receptor upgrade more stable by @fitbeard in #143

Full Changelog: v24.6.1...v24.6.2

AWX version 24.6.1

What's Changed

• fix: ee image build by @fitbeard in #96
• feat: add shell script for receptor key pair generation by @fitbeard in #122
• fix: always use UTC for key pair generation by @fitbeard in #123
• feat: upgrade to awx 24.6.1 by @fitbeard in #124

Full Changelog: v24.2.0...v24.6.1

AWX version 24.2.0

This release contains breaking changes. For more info please read full CHANGELOG.

What's Changed

• feat: add 24.2.0 support by @fitbeard in #95

Full Changelog: v23.7.0...v24.2.0

AWX version 23.7.0

What's Changed

• chore: switch to poetry by @fitbeard in #86
• feat: add awx 23.7.0 support by @fitbeard in #87

Full Changelog: v23.5.1...v23.7.0