Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Ansible Automation Platform

Ansible Role: apstra-aap-configure

You can use Ansible Role to configure Ansible Automation Controller (Ansible Tower) and Ansible Decisions (event-driven Ansible) for Juniper Apstra EDA.

Role Variables

Table 1: Role Variables
Variable Required Type Comments
organization_name yes String Name of the organization in Ansible Automation Platform
project_url yes String URL for the project where Playbooks and Rulebooks are available
project_scm_branch yes String SCM branch for the project
apstra_blueprint_name yes String Name of the Apstra blueprint
kubernetes_host yes   Kubernetes/OpenShift API server URL (for example): https://api.<cluster-domain>:6443
automation_controller_host yes String Ansible host controller URL. Go to Operators | Ansible Automation Platform | All Instances | Automation Controller | URL
automation_controller_username yes String Automation Controller username
automation_controller_password yes String Automation Controller password
execution_environment_image_url yes String Full image URL for the Execution Environment pushed to your registry (including tag): <your-registry>/apstra-ee-x86_64-6.0.0:latest
eda_controller_host yes String Ansible EDA controller URL. Go to operators | Ansible Automation Platform | All Instances | Automation EDA | URL
eda_controller_username yes String Ansible EDA controller Username
eda_controller_password yes String Ansible EDA controller Password
controller_api yes String API endpoint of Ansible controller,. For example: https://aap-<name>.apps.<cluster-domain>/api/controller/
decision_environment_image_url yes String Full image URL for the Decision Environment pushed to your registry (including tag). For example: <your-registry>/juniper-k8s-de-x86_64-6.0.0:latest
apstra_api_url yes String URL for the Apstra API. For example: https://<apstra-host>/api
apstra_username yes String Username for Apstra
apstra_password yes String Password for Apstra (sensitive). Consider using Ansible Vault).

Files

Name Required to Change Comments
openshift-ca.crt Yes — generate using Step 4 in the Bearer Token section Cluster CA certificate for OpenShift authentication
openshift-sa.token Yes — generate using Step 3 in the Bearer Token section Service account bearer token for OpenShift authentication
cred_injector_config.json No — do not modify Static template used by the playbook to create Apstra credential types in AAP
cred_input_config.json No — do not modify Static template used by the playbook to create Apstra credential types in AAP

Configuring Ansible Automation Platform

Follow these steps to configure Ansible Automation Platform for Juniper Apstra EDA.

  1. Clone the automation project:
  2. Populate the variables file:

    Edit apstra-aap-configure/vars/main.yml with the values for your environment. Use the commands below to retrieve each required value:

    kubernetes_host

    automation_controller_host:

    automation_controller_password:

    eda_controller_host:

    eda_controller_password:

    controller_api:

    execution_environment_image_url and decision_environment_image_url

    Use the full image URLs (including tag) from the registry push steps in Download and Installation of Environments.

    apstra_api_url--https://<apstra-host>/api

    apstra_blueprint_name, apstra_username, apstra_password: Use the blueprint name, username, and password from your Apstra instance.

  3. Copy credential files:
  4. Resolve AAP hostnames. Verify that all AAP component hostnames are resolvable from the management node:
  5. If they are not resolvable via DNS, add the router/ingress IP to /etc/hosts:
  6. Run the configuration playbook: