Configure Ansible Automation Platform to authenticate through service account credentials

Updated -

In the near future, the Hybrid Cloud Console will deprecate basic authentication. If you use Red Hat Insights for Ansible Automation Platform or automation analytics, you must manually create a service account to use in place of basic authentication.

Why?

Red Hat puts customer security at the center of its products and services. Therefore, we are implementing token-based service accounts to replace basic authentication. Service accounts offer enhanced security features to better secure customer data.

Prerequisites

Before proceeding, ensure you have:

  • Administrative access to Ansible Automation Platform.
  • A service account created in the Hybrid Cloud Console, along with the client ID and client secret produced when you created the service account.
  • User access to modify the services being automated (in this case, Insights and Analytics).

First, follow the procedure for creating a service account in the Hybrid Cloud Console. When you complete the procedure, you will receive a client ID and client secret. Note that you will not see this information again, so be sure to save your client ID and client secret in a secure place.

If you use Red Hat Insights to synchronize your inventory or for remediation, follow the steps in Support for token-based authentication via Service Account for Red Hat Insights in Ansible Automation Platform.

If you use automation analytics to monitor your automation in the Hybrid Cloud Console, follow the steps below that correspond to your version of AAP.

Analytics on Ansible Automation Platform 2.4

  1. From the navigation panel, select Settings > Miscellaneous Settings.
  2. Click Edit.
  3. In the field labeled Red Hat customer username, enter the client ID you received when you created your service account.
  4. In the field labeled Red Hat customer password, enter the client secret you received when you created your service account.
  5. Beneath Options, select the checkbox to Gather data for Automation Analytics.
  6. Click Save.

Analytics on Ansible Automation Platform 2.5

  1. From the navigation panel, select Settings > System.
  2. Click Edit.
  3. In the field labeled Red Hat customer username, enter the client ID you received when you created your service account.
  4. In the field labeled Red Hat customer password, enter the client secret you received when you created your service account.
  5. Beneath Options, select the checkbox to Gather data for Automation Analytics.
  6. Click Save.

Test and Validate Configuration

After configuring the service account, run a test job to ensure everything is set up correctly.

  1. From the navigation panel, select Automation Execution > Jobs to launch a job.
  2. Monitor analytics at console.redhat.com to confirm that the data is being posted.

Comments