AAP Config as Code Office Hours Agenda

[github-actions]

AAP Config as Code Office Hours

What

After attending other Office Hours of various groups, we decided to host one of our own.
The goal is to host a regular time for the AAP Config as Code contributors to be available for your folks in the Community, so we are happy to announce a new regular video meeting.

Where & When

The meeting will be held on the first Thursday of the month at 0900 EDT

• Google Meet
• Via Phone PIN: 621 302 239 Guide

This meeting is held the first Thursday of the month, at 1400 UTC

How

Add one topic per comment in this GitHub issue

If you don't have a GitHub account, jump on #aap_config_as_code:ansible.com on Matrix and we can add the topic for you

Talk with us

As well as the monthly video meeting you can join the Community (inc development team) on Matrix Chat.

• Matrix: #aap_config_as_code:ansible.com (recommended)

Past Recordings

Recordings of past meetings can be found in this [google drive folder(https://drive.google.com/drive/folders/199_VnU0T8fd2Q-KXu6QpUi7KtFfIUZqd?usp=drive_link).

See you soon!

[tenletters10]

Hello,

Here are a few items I would like to add to the agenda. Thanks.

Note all of the items listed below are with the interested of AAP 2.5:

• EDA credential types are being updated to align with Automation credentials (Jira ANSTRAT-878) for external lookups using existing integrations. Will the eda_credentials role need changes, and if so, are there plans to address this already?

• Are there plans to support creating Role Definitions? We need to create custom roles for the Controller and EDA. We've managed to do this for the Automation Controller using the API (/api/controller/v2/role_definitions) but haven't found an API method for EDA role definitions. The controller_roles role was not able to be used since this looks like it was designed for AAP 2.4 and earlier and not for the Gateway role changes.

• The gateway_role_user_assignments role allows assigning permissions to users for objects within AAP using object ID. There are two questions regarding this topic:

  1. Are there any plans to support using object names instead of object IDs? This request is due to the fact that when AAP is redeployed from code, the IDs might change based on the deployment. For developers, referencing IDs can be less convenient. Roles like controller_job_templates allow referencing other objects by name (inventory, project, credentials, execution environment).

  2. Are there any plans to support teams instead of just users for assignment? We use Teams from the gateway for assigning permissions.

[sean-m-sullivan]

@tenletters10 EDA credential Types are in flux, I've reached out on that Ansrat and think we will have a response

Currently have been looking at the issue with roles, We need a EDA module to do it, so are waiting on that. https://issues.redhat.com/browse/AAPRFE-2005

The gateway one, should be done with Authentication mapping, but agree by ID is out of practice on the modules, Not sure of an effort to fix that. If you aren't using an external authentication like SAML/LDAP.

Can discuss more in the meeting, but this is a quick follow up