Skip to content

Commit 7c7fb55

Browse files
committed
TELCODOCS-2203 updating federated edge 1
1 parent d56f25f commit 7c7fb55

File tree

3 files changed

+786
-0
lines changed

3 files changed

+786
-0
lines changed
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,50 @@
1+
== Federated Edge Observability
2+
3+
=== Background
4+
5+
Organizations are interested in accelerating their deployment speeds and
6+
improving delivery quality in their Edge environments, where many
7+
devices may not fully or even partially embrace the GitOps philosophy.
8+
Further, there are VMs and other devices that can and should be managed
9+
with Ansible. This pattern explores some of the possibilities of using
10+
an OpenShift-based Ansible Automated Platform deployment and managing
11+
Edge devices, based on work done with a partner in the Chemical space.
12+
13+
This pattern uses OpenShift Virtualization (the productization of
14+
Kubevirt) to simulate the Edge environment for VMs.
15+
16+
==== Solution elements
17+
18+
* How to use a GitOps approach to manage virtual machines, either in
19+
public clouds (limited to AWS for technical reasons) or on-prem
20+
OpenShift installations
21+
* How to integrate AAP into OpenShift
22+
* How to manage Edge devices using AAP hosted in OpenShift
23+
24+
==== Red Hat Technologies
25+
26+
* Red Hat OpenShift Container Platform (Kubernetes)
27+
* Red Hat Ansible Automation Platform (formerly known as "`Ansible
28+
Tower`")
29+
* Red Hat OpenShift GitOps (ArgoCD)
30+
* OpenShift Virtualization (Kubevirt)
31+
* Red Hat Enterprise Linux 9
32+
33+
==== Other Technologies this Pattern Uses
34+
35+
* Hashicorp Vault
36+
* External Secrets Operator
37+
* OpenTelemetry
38+
* Grafana
39+
* Mimir
40+
41+
=== Architecture
42+
43+
Similar to other patterns, this pattern starts with a central management
44+
hub, which hosts the AAP and Vault components, and the observability
45+
collection and visualization components.
46+
47+
=== What Next
48+
49+
* link:getting-started[Getting Started: Deploying and Validating the
50+
Pattern]
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,78 @@
1+
== Ansible Automation Platform
2+
3+
=== How to Log In
4+
5+
The default login user is `+admin+` and the password is generated
6+
randomly at install time; you will need the password to login in to the
7+
AAP interface. You do not have to log in to the interface - the pattern
8+
will configure the AAP instance; the pattern retrieves the password
9+
using the same technique as the `+ansible_get_credentials.sh+` script
10+
described below. If you want to inspect the AAP instance, or change any
11+
aspects of its configuration, there are two ways to login and look at
12+
it. Both mechanisms are equivalent; you get the same password to the
13+
same instance using either technique.
14+
15+
=== Via the OpenShift Console
16+
17+
In the OpenShift console, navigate to Workloads > Secrets and select the
18+
"`ansible-automation-platform`" project if you want to limit the number
19+
of Secrets you can see.
20+
21+
link:/images/ansible-edge-gitops/ocp-console-secrets-aap-admin-password.png[image:/images/ansible-edge-gitops/ocp-console-secrets-aap-admin-password.png[secrets-navigation]]
22+
23+
The Secret you are looking for is in the `+ansible-automation-platform+`
24+
project and is named `+controller-admin-password+`. If you click on it,
25+
you can see the Data.password field. It is shown revealed below to show
26+
that it is the same as what is shown by the script method of retrieving
27+
it below:
28+
29+
link:/images/ansible-edge-gitops/ocp-console-aap-admin-password-detail.png[image:/images/ansible-edge-gitops/ocp-console-aap-admin-password-detail.png[secrets-detail]]
30+
31+
=== Via https://github.com/validatedpatterns/ansible-edge-gitops/blob/main/scripts/ansible_get_credentials.sh[ansible_get_credentials.sh]
32+
33+
With your KUBECONFIG set, you can run
34+
`+./scripts/ansible-get-credentials.sh+` from your top-level pattern
35+
directory. This will use your OpenShift cluster admin credentials to
36+
retrieve the URL for your Ansible Automation Platform instance, as well
37+
as the password for its `+admin+` user, which is auto-generated by the
38+
AAP operator by default. The output of the command looks like this (your
39+
password will be different):
40+
41+
[source,text]
42+
----
43+
./scripts/ansible_get_credentials.sh
44+
[WARNING]: provided hosts list is empty, only localhost is available. Note that the implicit localhost does not match
45+
'all'
46+
47+
PLAY [Install manifest on AAP controller] ******************************************************************************
48+
49+
TASK [Retrieve API hostname for AAP] ***********************************************************************************
50+
ok: [localhost]
51+
52+
TASK [Set ansible_host] ************************************************************************************************
53+
ok: [localhost]
54+
55+
TASK [Retrieve admin password for AAP] *********************************************************************************
56+
ok: [localhost]
57+
58+
TASK [Set admin_password fact] *****************************************************************************************
59+
ok: [localhost]
60+
61+
TASK [Report AAP Endpoint] *********************************************************************************************
62+
ok: [localhost] => {
63+
"msg": "AAP Endpoint: https://controller-ansible-automation-platform.apps.mhjacks-aeg.blueprints.rhecoeng.com"
64+
}
65+
66+
TASK [Report AAP User] *************************************************************************************************
67+
ok: [localhost] => {
68+
"msg": "AAP Admin User: admin"
69+
}
70+
71+
TASK [Report AAP Admin Password] ***************************************************************************************
72+
ok: [localhost] => {
73+
"msg": "AAP Admin Password: CKollUjlir0EfrQuRrKuOJRLSQhi4a9E"
74+
}
75+
76+
PLAY RECAP *************************************************************************************************************
77+
localhost : ok=7 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
78+
----

0 commit comments

Comments
 (0)