AdWerx · benjamin-losson-decathlon · Apr 12, 2022 · Jun 2, 2022
diff --git a/awx/CHANGELOG.md b/awx/CHANGELOG.md
@@ -1,3 +1,8 @@
+2022-04-12 - 3.4.4
+---
+
+* Addind extraEnv var to add env var to all awx containers
+
 2021-11-30 - 3.4.0
 ---
 

diff --git a/awx/Chart.yaml b/awx/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 description: AWX provides a web-based user interface, REST API, and task engine built on top of Ansible. It is the upstream project for Tower, a commercial derivative of AWX.
 name: awx
-version: "3.4.3"
+version: "3.4.4"
 keywords:
   - ansible
   - awx

diff --git a/awx/README.md b/awx/README.md
@@ -1,59 +1,59 @@
-<!--
-STOP! README.md is automatically generated using helm-docs
-Run `helm-docs .` to generate.
-If you're looking at README.md.gotmpl, then you're in the right place.
--->
-# Ansible AWX
-
-
-
-![Version: 3.4.0](https://img.shields.io/badge/Version-3.4.0-informational?style=flat-square) ![AppVersion: 17.1.0](https://img.shields.io/badge/AppVersion-17.1.0-informational?style=flat-square) 
-
-AWX provides a web-based user interface, REST API, and task engine built on top of Ansible. It is the upstream project for Tower, a commercial derivative of AWX.
-
-**Homepage:** <https://github.com/ansible/awx>
-
-## Installation
-
-Add our repo:
-
-```bash
-helm repo add adwerx https://adwerx.github.io/charts
-```
-
-Install the chart:
-
-```bash
-helm install adwerx/awx
-```
-
+<!--
+STOP! README.md is automatically generated using helm-docs
+Run `helm-docs .` to generate.
+If you're looking at README.md.gotmpl, then you're in the right place.
+-->
+# Ansible AWX
+
+
+
+![Version: 3.4.0](https://img.shields.io/badge/Version-3.4.0-informational?style=flat-square) ![AppVersion: 17.1.0](https://img.shields.io/badge/AppVersion-17.1.0-informational?style=flat-square) 
+
+AWX provides a web-based user interface, REST API, and task engine built on top of Ansible. It is the upstream project for Tower, a commercial derivative of AWX.
+
+**Homepage:** <https://github.com/ansible/awx>
+
+## Installation
+
+Add our repo:
+
+```bash
+helm repo add adwerx https://adwerx.github.io/charts
+```
+
+Install the chart:
+
+```bash
+helm install adwerx/awx
+```
+
 ## Maintainers
 
 | Name | Email | Url |
 | ---- | ------ | --- |
-| Josh Bielick |  | https://github.com/jbielick |
-
+| Josh Bielick |  | https://github.com/jbielick |
+
 ## Source Code
 
-* <https://github.com/AdWerx/charts/tree/master/awx>
-
+* <https://github.com/AdWerx/charts/tree/master/awx>
+
 ## Requirements
 
 | Repository | Name | Version |
 |------------|------|---------|
-| https://charts.bitnami.com/bitnami | postgresql | 10.5.0 |
-
-## Job Isolation and Security Context
-
-Ansible AWX task runners employ a legacy process isolation for playbook runs (jobs) via [bubblewrap](https://github.com/containers/bubblewrap). The purpose of this isolation is [to restrict access to shared AWX subsystems, which could be multi-tenant](https://github.com/ansible/awx/pull/7188#issuecomment-636069719)—access the AWX task pod has and could be exploited. If you are not using AWX in a multi-tenant fashion and trust users writing playbooks to have full access to a Pod in your cluster, you may choose to disable bubblewrap. If you'd like to retain bubblewrap isolation on playbook runs in a kubernetes deployment, you'll need to run the AWX task pods with a privileged security context (PR welcome).
-
-Per the AWX documentation, if you choose to turn off Job Isolation you can do so by following the instructions below:
-
-> **Disabling bubblewrap support:**
-> To disable bubblewrap support for running jobs (playbook runs only), ensure you are  logged in as the Admin user and click on the settings gear settings in the upper right-hand corner. Click on the “Configure Tower” box, then click on the “Jobs” tab. Scroll down until you see “Enable Job Isolation” and change the radio button selection to “off”.
-
-[More information on the future of playbook isolation here](https://github.com/ansible/awx/issues/7060)
-
+| https://charts.bitnami.com/bitnami | postgresql | 10.5.0 |
+
+## Job Isolation and Security Context
+
+Ansible AWX task runners employ a legacy process isolation for playbook runs (jobs) via [bubblewrap](https://github.com/containers/bubblewrap). The purpose of this isolation is [to restrict access to shared AWX subsystems, which could be multi-tenant](https://github.com/ansible/awx/pull/7188#issuecomment-636069719)—access the AWX task pod has and could be exploited. If you are not using AWX in a multi-tenant fashion and trust users writing playbooks to have full access to a Pod in your cluster, you may choose to disable bubblewrap. If you'd like to retain bubblewrap isolation on playbook runs in a kubernetes deployment, you'll need to run the AWX task pods with a privileged security context (PR welcome).
+
+Per the AWX documentation, if you choose to turn off Job Isolation you can do so by following the instructions below:
+
+> **Disabling bubblewrap support:**
+> To disable bubblewrap support for running jobs (playbook runs only), ensure you are  logged in as the Admin user and click on the settings gear settings in the upper right-hand corner. Click on the “Configure Tower” box, then click on the “Jobs” tab. Scroll down until you see “Enable Job Isolation” and change the radio button selection to “off”.
+
+[More information on the future of playbook isolation here](https://github.com/ansible/awx/issues/7060)
+
 ## Values
 
 | Key | Type | Default | Description |
@@ -66,6 +66,7 @@ Per the AWX documentation, if you choose to turn off Job Isolation you can do so
 | default_admin_user | string | `nil` |  |
 | extraConfiguration | string | `"# INSIGHTS_URL_BASE = \"https://example.org\""` |  |
 | extraVolumes | list | `[]` |  |
+| extraEnv | list | `[]` |  |
 | fullnameOverride | string | `""` |  |
 | image.pullPolicy | string | `"IfNotPresent"` |  |
 | image.repository | string | `"ansible/awx"` |  |
@@ -98,4 +99,4 @@ Per the AWX documentation, if you choose to turn off Job Isolation you can do so
 | tolerations | string | `nil` |  |
 | web.extraVolumeMounts | list | `[]` |  |
 | web.extraVolumes | list | `[]` |  |
-| web.resources | object | `{}` |  |
+| web.resources | object | `{}` |  |
diff --git a/awx/requirements.lock b/awx/requirements.lock
diff --git a/awx/requirements.yaml b/awx/requirements.yaml
diff --git a/awx/templates/_helpers.tpl b/awx/templates/_helpers.tpl
@@ -134,4 +134,7 @@ provides the container env definitions
     secretKeyRef:
       name: {{ include "awx.secretKeySecretName" . }}
       key: SECRET_KEY
+{{- if .Values.extraEnv }}
+{{ toYaml .Values.extraEnv}}
+{{- end }}
 {{- end -}}
diff --git a/awx/values.yaml b/awx/values.yaml
@@ -11,6 +11,7 @@ image:
   tag: "17.1.0"
   pullPolicy: IfNotPresent
 extraVolumes: []
+extraEnv: []
 nodeSelector:
 affinity:
 tolerations: