1. Import Ansible roles into Satellite.
2. Assign specific roles to a host or host group.
3. Optional: Override Ansible variables per host or host group in Satellite.
4. Run the roles on the host or host group.

Procedure

1. Ensure that the following repository is enabled:

   • On Red Hat Enterprise Linux 10, 9, or 8, ensure that the AppStream repository is enabled:

     # subscription-manager repos --enable=rhel-10-for-x86_64-appstream-rpms
     # subscription-manager repos --enable=rhel-9-for-x86_64-appstream-rpms
     # subscription-manager repos --enable=rhel-8-for-x86_64-appstream-rpms

     Copy code to clipboard

     You must enable an AppStream repository that is designated for your architecture. For more information, see RHEL 8 repositories.

   • On Red Hat Enterprise Linux 7, ensure that the Extras repository is enabled:

     # subscription-manager repos --enable=rhel-7-server-extras-rpms

     Copy code to clipboard

2. Install the rhel-system-roles package:

   # satellite-maintain packages install rhel-system-roles

   Copy code to clipboard

   The rhel-system-roles package downloads to /usr/share/ansible/roles/. You can view and make any modifications that you want to the files before you import.

3. In the Satellite web UI, navigate to Configure > Ansible > Roles.
4. Click the Capsule that contains the roles that you want to import.

5. From the list of Ansible roles, select the checkbox of the roles you want to import, and then click Update.

   You can now assign Ansible roles to hosts or host groups. For more information, see Section 3.5, “Assigning Ansible roles to an existing host”.

   You can also add the modules contained in these roles to your Ansible Playbooks by adding them to Ansible Job Templates. You must include the hosts:all line in the job template. For more information, see Red Hat Enterprise Linux (RHEL) System Roles.

Procedure

1. Place the roles and variables in the appropriate Ansible paths on all Capsules from where you want to use the roles. For more information, see Appendix A, Ansible role and collection paths in Satellite.

   If you want to use custom or third party Ansible roles, ensure to configure an external version control system to synchronize roles between Satellite Server and Capsule Servers.

2. In the Satellite web UI, navigate to Configure > Ansible > Roles.
3. Click Import to select the Capsule from which you want to import.
4. Select the roles that you want to import.
5. Click Submit.

Procedure

1. In the Satellite web UI, navigate to Configure > Ansible > Variables.
2. Select the Ansible variable that you want to override and manage with Satellite.
3. In the Default Behavior area, select the Override checkbox.
4. In the Parameter Type field, select the value type for validation such as string or boolean. The types array and hash have further options for handling upon a variable match. For more information, see the Prioritize Attribute Order area below.
5. In the Default Value field, enter the default value that you want to use if there is no match for the variable.
6. Optional: If you do not want to display the value of the variable as plain text in the Satellite web UI, select the Hidden Value checkbox to display the content of the variable as asterisks. This is useful for sensitive values such as passwords or secret tokens.

7. Optional: Expand the Optional Input Validator area and specify conditions that will be used to validate concrete values of the variable:

   • Select Required if you want to enforce users to fill in this variable.

   • In the Validator Type field, select how the value will be validated:

     • list – The value will be validated against an enumeration of allowed values.
     • regex – The value will be validated against a regular expression pattern.

8. Optional: In the Prioritize Attribute Order area, specify the order of priority to match an override with a host by host attributes. Order at the top takes higher precedence. The first match wins.

   You can combine multiple attributes into a single matcher key using a comma as the AND operation. For example, the matcher key of hostgroup, environment would expect matchers such as hostgroup = "web servers" AND environment = production.

   If you use the parameter type array or hash, you can further set:

   • Merge Overrides – Merges members of the arrays/hashes instead of replacing the whole array or hash. If the hashes contain the same key, the value is overwritten by the value of the host.
   • Merge Default – Adds the default value to the array or hash.
   • Avoid Duplicates – Ensures that the values in the array or hash are unique.
9. Optional: Expand the Specify Matchers area and specify criteria for selecting hosts on which the variable overrides.
10. To save the override settings, click Submit.

11. To use the Ansible variable, add the variable as a parameter to your host or host group, or add the variable as a global parameter:

    1. To add the variable to a host:

       1. In the Satellite web UI, navigate to Hosts > All Hosts and select the host that you want to use.
       2. Click the Ansible tab, and in the Variables area, click the pencil icon to edit the value of the variable.
       3. Click the tick icon to accept the value of the changed variable or the cross icon to cancel the change.

    2. To add the variable to a host group:

       1. In the Satellite web UI, navigate to Configure > Host Groups, and select the host group that you want to use.
       2. Click the Parameters tab, and in the Host Group Parameters area, click Add Parameter.
       3. In the Name field, add the Ansible variable name.
       4. From the Type list, select the type of the variable for validation.
       5. In the Value field, enter the value for the variable.

    3. To add the variable as a global parameter:

       1. In the Satellite web UI, navigate to Configure > Global Parameters, and click Create Parameter.
       2. In the Name field, add the Ansible variable name.
       3. From the Type list, select the type of the variable for validation.
       4. In the Value field, enter the value for the variable.
       5. Optional: If you do not want to display the Ansible variable in plain text, select the Hidden Values checkbox to display the content of the variable as asterisks in the Satellite web UI.

Procedure

1. In the Satellite web UI, navigate to Configure > Host Groups.
2. Click the host group name to which you want to assign an Ansible role.
3. On the Ansible Roles tab, select the role that you want to add from the Available Ansible Roles list.
4. Click the + icon to add the role to the host group. You can add more than one role.
5. Click Submit.

Procedure

1. In the Satellite web UI, navigate to Hosts > All Hosts.
2. Select the host and click Edit.
3. On the Ansible Roles tab, select the role that you want to add from the Available Ansible Roles list.
4. Click the + icon to add the role to the host. You can add more than one role.
5. Click Submit.
6. Optional: On the Parameters tab, click Add Parameter to add any parameter variables that you want to pass to job templates at run time. This includes all Ansible Playbook parameters and host parameters that you want to associate with the host. To use a parameter variable with an Ansible job template, you must add a Host Parameter.

Procedure

1. In the Satellite web UI, navigate to Hosts > All Hosts.
2. Select a host.
3. Select the Ansible Roles tab.
4. In the Assigned Ansible Roles area, you can change the order of the roles by dragging and dropping the roles into the preferred position.
5. Click Submit to save the order of the Ansible roles.

Procedure

1. In the Satellite web UI, navigate to Hosts > All Hosts.
2. Select the host and click Edit.
3. Select the Ansible Roles tab.
4. In the Assigned Ansible Roles area, click the - icon to remove the role from the host. Repeat to remove more roles.
5. Click Submit.

Procedure

1. In the Satellite web UI, navigate to Hosts > All Hosts.
2. Select the host on which you want to run the assigned Ansible roles.
3. From the Schedule a job menu, select Run Ansible roles.

Procedure

1. In the Satellite web UI, navigate to Configure > Host Groups.
2. From the list in the Actions column for the host group, select Run all Ansible roles.
3. You can view the status of your Ansible job on the Run Ansible roles page. Click Rerun to rerun a job.

Procedure

1. In the Satellite web UI, navigate to Hosts > All Hosts.
2. Click Edit for the host you want to enable check mode for.
3. In the Parameters tab, ensure that the host has a parameter named ansible_roles_check_mode with type boolean set to true.
4. Click Submit.

Procedure

1. In the Ansible Automation Platform web UI, create a credential for your Satellite. For more information about creating credentials, see Creating new credentials and Red Hat Satellite 6 credential type in Red Hat Ansible Automation Platform documentation.

   Table 6.1. Satellite credentials

   Credential Type:	Red Hat Satellite 6
   Satellite URL:	https://satellite.example.com
   Username:	The username of the Satellite user with the integration role.
   Password:	The password of the Satellite user.

2. Add an Ansible Automation Platform user to the new credential. For more information about adding a user to a credential, see Adding new users and job templates to existing credentials in Red Hat Ansible Automation Platform documentation.

3. Add a new inventory. For more information, see Add a new inventory in Red Hat Ansible Automation Platform documentation.

   In the new inventory, add Satellite Server as the inventory source, specifying the following inventory source options.

   Table 6.2. Inventory source options

   Source	Red Hat Satellite 6
   Credential	The credential you create for Satellite Server.
   Overwrite	Select
   Overwrite Variables	Select
   Update on Launch	Select
   Cache Timeout	90

4. Ensure that you synchronize the source that you add.

1. ansible_provisioning_callback
2. ansible_tower_callback_script
3. ansible_tower_callback_service

Procedure

1. In the Ansible Automation Platform web UI, complete the following tasks:

   1. Create a machine credential for your new host. Ensure that you enter the same password in the credential that you plan to assign to the host that you create in Satellite. For more information, see Managing user credentials in Red Hat Ansible Automation Platform documentation.
   2. Create a project. For more information, see Projects in Red Hat Ansible Automation Platform documentation.
   3. Add a job template to your project. In your job template, you must enable provisioning callbacks, generate the host configuration key, and note the template_ID of your job template. For more information, see Job templates in Red Hat Ansible Automation Platform documentation.
2. In the Satellite web UI, navigate to Configure > Host Group.
3. Create a host group or edit an existing host group.
4. In the Host Group window, click the Parameters tab.
5. Click Add Parameter.

6. Enter the following information for each new parameter:

   Table 6.3. Host parameters

   Name	Value	Description
   ansible_tower_provisioning	true	Enables Provisioning Callback.
   ansible_tower_api_url	Content from aap.example.com is not included.https://aap.example.com/api/controller/v2	Defines the URL of your Ansible Automation Platform, including the required API path. For older versions of Ansible Automation Platform, use /api/v2 instead of /api/controller/v2. If unsure, check the API endpoints of your instance to verify the correct path.
   ansible_job_template_id	template_ID	The ID of your provisioning template that you can find in the URL of the template: /templates/job_template/5.
   ansible_host_config_key	config_KEY	The host configuration key that your job template generates in Ansible Automation Platform.

7. Click Submit.
8. Create a host using the host group.

9. On your new host, start the ansible-callback service:

   # systemctl start ansible-callback

   Copy code to clipboard

10. On your new host, check the the status of the ansible-callback service:

    # systemctl status ansible-callback

    Copy code to clipboard

    Provisioning callback is configured correctly if the command returns the following output:

    satellite.example.com systemd[1]: Started Provisioning callback to Ansible Automation Platform...

    Copy code to clipboard
    Note

    For manual provisioning callback, you can use the provisioning callback URL and the host configuration key from a host to call Ansible Automation Platform:

    $ curl \
    --data curl \
    --data host_config_key=My_Host_Config_Key \
    --show-error \
    --silent \
    https://aap.example.com/api/v2/job_templates/8/callback/

    Copy code to clipboard

    Ensure that you use https when you enter the provisioning callback URL.

    This triggers the playbook run specified in the template against the host.