Chapter 2. Logging in to self-service automation portal

Prerequisites

1. You have configured an OAuth application in Ansible Automation Platform for self-service automation portal.
2. You have configured a user account in Ansible Automation Platform.

Procedure

1. In a browser, navigate to the URL for self-service automation portal to open the sign-in page.

   
2. Click Sign In.

3. The sign-in page for Ansible Automation Platform appears:

   
4. Enter your Ansible Automation Platform credentials and click Log in.
5. The self-service automation portal web console opens.

Procedure

1. Obtain the CA certificate file from your Ansible Automation Platform instance.

   If you do not have the CA certificate file, you can extract it from your Ansible Automation Platform server:

   openssl s_client -showcerts -connect <aap-hostname>:443 </dev/null 2>/dev/null | openssl x509 -outform PEM > aap-ca-cert.pem

   Replace <aap-hostname> with your Ansible Automation Platform hostname.

2. Log in to your OpenShift Container Platform cluster with administrator privileges.

3. Create a ConfigMap containing your custom CA certificate:

   oc create configmap custom-ca-bundle \
     --from-file=ca-bundle.crt=aap-ca-cert.pem \
     -n <namespace>

   Replace <namespace> with the namespace where self-service automation portal is installed.

4. Update your self-service automation portal Helm chart values to mount the custom CA certificate:

   upstream:
     backstage:
       extraEnvVarsSecrets:
         - custom-ca-bundle
       extraVolumes:
         - name: custom-ca
           configMap:
             name: custom-ca-bundle
       extraVolumeMounts:
         - name: custom-ca
           mountPath: /etc/pki/ca-trust/source/anchors/
           readOnly: true

5. Apply the updated configuration by upgrading the self-service automation portal Helm chart:

   helm upgrade <release-name> <chart-name> \
     -f values.yaml \
     -n <namespace>

   Replace <release-name> with your Helm release name and <chart-name> with the self-service automation portal chart name.

6. Wait for the self-service automation portal pods to restart with the new configuration.

Verification

1. Verify that the self-service automation portal pods are running:

   oc get pods -n <namespace>

   All self-service automation portal pods should show a status of Running.

2. Attempt to sign in to self-service automation portal using your Ansible Automation Platform credentials.

   If the SSL certificate configuration is correct, you can authenticate successfully without SSL verification errors.

3. Check the self-service automation portal logs for SSL-related errors:

   oc logs -n <namespace> <pod-name> | grep -i ssl

   If you see no SSL verification errors, the custom CA certificate is trusted correctly.

Prerequisites

1. You have signed in to self-service automation portal.

Procedure

1. In a browser, sign in to self-service automation portal.

2. In the navigation pane, select Templates to open a landing page where tiles are displayed, representing the templates that you have access to.

   

Procedure

1. In a browser, sign in to self-service automation portal.

2. In the navigation pane, select Templates to display the templates that you have access to.

   
3. Select Sync now to launch a synchronization.

Procedure

1. In a browser, sign in to self-service automation portal.

2. In the navigation pane, select History.

   The Task list page displays the tasks that have been run.