Skip to navigationSkip to content

Featured links

  • Support
  • Console
  • Developers
  • Start a trial
    • For customers
      • Customer support
      • Subscription management
      • Support Cases
      • Red Hat Ecosystem Catalog
      • Find a partner
    • For partners
      • Partner portal
      • Partner support
      • Become a partner
    • Try, buy, & sell
      • Red Hat Store
      • Contact Sales
      • Start a trial
    • Learning resources
      • Training and certification
      • Hybrid cloud learning hub
      • Interactive labs
      • Learning community
      • Red Hat TV
      • Architecture Center
    • Open source communities
      • Global advocacy
      • How we contribute
Red Hat Documentation
  • AI
  • Learn
  • Documentation
  • Resources
SupportConsoleDevelopersStart a trialContact

Red Hat Ansible Automation Platform

This documentation may not be available for all versions.

View the product page for all versions

Table of contents

What's new
  • Ansible Automation Platform release notes
    • New features and enhancements
    • Deprecated features
    • Removed features
    • Changed features
    • Known issues
    • CVE - Bug Fixes
    • Patch releases
      • October 7, 2026 (portal-2.2.9)
      • October 5, 2026 (2.7-11)
      • September 28, 2026 (portal2.2.8)
      • September 25, 2026 hotfix (2.7-9)
      • September 21, 2026 (2.7-9)
      • September 14, 2026 (2.7-8)
      • September 07, 2026 (portal-2.2.7)
      • August 24, 2026 (2.7-6)
      • August 4, 2026 (2.7.4)
      • July 27, 2026 (2.7-3)
      • July 15, 2026 (2.7-3)
      • June 23, 2026 (2.7-2)
      • June 17, 2026 (2.7-1)
      • Jun 4, 2026 (2.7-1)
  • Technology Preview
    • Bring your own knowledge to the automation intelligent assistant
    • OIDC authentication for HashiCorp Vault
      • Configure the HashiCorp Vault server
      • OIDC credential types for HashiCorp Vault
        • Create a credential using a Vault OIDC credential type
      • Claims for workload identity
      • Example HashiCorp Vault Policy
    • Automation portal operator
    • Control-plane execution environment (Technology Preview)
      • Opt in to control-plane-ee on OpenShift Container Platform
      • Revert to ee-supported on OpenShift Container Platform
      • Opt in to control-plane-ee on a containerized installation
      • Revert to ee-supported on a containerized installation
      • Known limitations
Discover
  • What is Ansible Automation Platform
  • Ansible components
Get started
  • Get started automating with playbooks
  • Get started as a platform administrator
  • Get started as an automation developer
    • Set up your development environment
    • Create automation content with playbooks
    • Write a playbook
    • Define events with rulebooks
    • Package and reuse content with roles
    • Package and distribute automation content with collections
    • Create automation runtimes with execution and decision environments
    • Organize and define automation sources and targets
    • Reliably run playbooks with job templates
    • Configure rulebooks to take action in response to events or conditions
  • Get started as an automation operator
Plan
  • Choose a deployment method and topology
    • Installation and deployment models
    • Container growth topology
    • Container enterprise topology
    • Operator growth topology
    • Operator enterprise topology
      • Configure external database for metrics service
    • Operator-managed NetworkPolicies
    • Network ports and protocols
  • Plan infrastructure requirements for Event-Driven Ansible
    • Event persistence in rulebook activations
    • Event streams database user for external databases
  • Plan your deployment using Ansible on Clouds
  • Plan the deployment of automation orchestrator
Install
  • Install containerized Ansible Automation Platform
    • Choose an installation type
    • Set up your subscription
      • Trial and evaluation
      • Node counting in subscriptions
      • Subscription Types
      • Register your Red Hat Enterprise Linux hosts
    • System requirements
    • Prepare the Red Hat Enterprise Linux host
    • Create the installation user
    • Configure an external database for event streams
      • Set up event streams database user with PostgreSQL admin credentials
      • Set up event streams database user without PostgreSQL admin credentials
    • Configure mutual TLS certificate authentication for event streams database
    • Download Ansible Automation Platform
    • Create a registry service account
    • Configure the inventory file
      • Tips for building inventories
      • Inventory file variables
    • Additional configuration options
      • Add a safe plugin variable to Event-Driven Ansible controller
      • Add execution nodes
      • Configure storage for automation hub
      • Configure a HAProxy load balancer
      • Enable automation content collection and container signing
      • Configure an external (customer provided) PostgreSQL database
        • Set up metrics service database with cross-database permissions
      • Configure custom TLS certificates
        • Understand the receptor mesh CA trust bundle
      • Configure feature flags for a containerized installation
    • Install containerized Ansible Automation Platform
    • Install in a disconnected environment
    • Activate your subscription
    • Uninstall containerized Ansible Automation Platform
    • Reinstall containerized Ansible Automation Platform
  • Install on OpenShift Container Platform
    • Plan your installation of Ansible Automation Platform on Red Hat OpenShift Container Platform
    • Install the Ansible Automation Platform Operator through OperatorHub
    • Install Ansible Automation Platform Operator from the CLI
    • Deploy Ansible Automation Platform
      • Deploy a new Ansible Automation Platform instance with components
      • Add components to an existing deployment
        • Enable the MCP server on an existing OCP deployment
      • Disable components within an existing deployment
      • Access Ansible Automation Platform through the UI
      • Access Ansible Automation Platform through the CLI
    • Manage Ansible Automation Platform subscriptions, updates, and support
      • Trial and evaluation
      • Node counting in subscriptions
      • Subscription Types
      • Obtain a manifest file
    • Activate your subscription
    • Customize your Red Hat Ansible Automation Platform Operator
    • Configure your Ansible Automation Platform deployment
      • Enable feature flags in your CR
    • Configure automation controller
    • Configure automation hub
      • Storage options for automation hub
      • Provision OpenShift Container Platform storage with ReadWriteMany access mode
      • Configure object storage on Amazon S3
      • Configure object storage on Azure Blob
      • Configure automation hub route options
      • Configure ingress options for automation hub
      • Finding the automation hub route
    • Configure custom PostgreSQL settings
    • Configure custom MCP server settings
    • Configure an external database for Ansible Automation Platform
      • Configure an external database for metrics service on Red Hat Ansible Automation Platform Operator
    • Configure an external database for event streams in Operator on OpenShift Container Platform
    • Configure Redis
    • Scale down your Ansible Automation Platform Operator deployment
    • Ansible Automation Platform Resource Operator
    • Create a custom resource for Resource Operator
    • Red Hat Ansible Automation Platform custom resources
  • Activate your subscription
    • Understand host metrics
    • Activate with credentials
    • Activate with a manifest file
    • Keep subscriptions for managed hosts in compliance
  • Understand metrics service architecture
    • Metrics service deployment requirements
    • Install metrics service with containerized installer
    • Enable metrics service in operator deployments
    • Configure external PostgreSQL database for metrics service with containerized installer
    • Configure external PostgreSQL database for metrics service with OpenShift operator
    • Metrics service configuration variables
    • Configure TLS/SSL for metrics service databases
    • Understand indirect node counting and collection
    • Verify indirect node collection
    • Uninstall metrics service
  • Set up your development environment
    • Requirements
    • Install and configure VS Code
    • Install and configure the Dev Containers extension
    • Set the language for the VS Code extension
    • Install Ansible development tools on a container inside VS Code
      • Requirements for Ansible development tools on Windows
    • Install Ansible development tools from an RPM package
    • Install Ansible Builder to create or edit execution environments
    • Configure Red Hat AI providers in the Ansible VS Code extension
  • Deploy Ansible automation portal RHEL appliance
    • Prerequisites for deploying Ansible automation portal on RHEL
    • Install Ansible automation portal on Red Hat Enterprise Linux KVM/QEMU
    • Install Ansible automation portal on Red Hat OpenShift Virtualization
    • Install Ansible automation portal on VMware vSphere
    • Connect and verify Ansible automation portal
    • Deploy a RHEL appliance in a disconnected environment
    • Replace self-signed SSL certificates
    • Set a custom user-accessible URL or port
    • Configure an external database
    • Cloud-init reference
    • Portal CLI commands reference
  • Install automation portal on OpenShift Container Platform
    • Install Ansible automation portal (OpenShift Container Platform only)
      • Ansible automation portal architecture and licensing
      • Supported platforms for Ansible automation portal
        • Interactive demonstration
          • Prerequisites
          • Pre-installation configuration
      • Select an organization
      • Create an OAuth application
      • Generate Git personal access tokens
      • Set up a project for Ansible automation portal in OpenShift
      • Create secrets in OpenShift for Ansible automation portal
      • Plug-in delivery method
        • OCI container delivery
        • Compare plug-in delivery methods
        • Determine version tags before you install
        • Migrate from HTTP plug-in registry to OCI container delivery
      • Configure an external PostgreSQL database for Ansible automation portal
      • Install the Ansible automation portal Helm chart
      • Install Ansible automation portal in air-gapped OpenShift Container Platform environments
      • Verify the configuration
      • Update the deployment URL
      • Set up initial RBAC rules in Ansible automation portal
        • Understand the permission model
        • Configure RBAC for synchronization
        • Configure conditional access
        • Permissions reference for Ansible Automation Platform job template access
        • Adjust synchronization frequency between Ansible Automation Platform and Ansible automation portal
      • Understanding Ansible Automation Platform synchronization
        • Ansible Automation Platform synchronization configuration reference
        • Ansible Automation Platform synchronization configuration examples
        • Manually triggering synchronization
        • Troubleshoot Ansible Automation Platform synchronization
      • Configure custom SSL certificates for the Ansible automation portal
    • Install automation portal on OpenShift using the operator
      • Understand the automation portal operator
      • Set up the automation portal operator
        • Configure credentials and secrets for the automation portal operator
        • Install the automation portal operator
        • Deploy automation portal in disconnected environments
      • Configure your automation portal operator deployment
        • Automation portal operator configuration reference
        • Configure source control management provider authentication
        • Configure an external PostgreSQL database for the automation portal operator
        • Configure custom TLS certificates for the automation portal operator
  • Automation dashboard deployment options
    • Understand automation dashboard architecture
    • Configure automation dashboard during containerized installation
    • Configure automation dashboard during operator installation
    • Install the standalone automation dashboard utility to calculate savings (RHEL only)
  • Install with Ansible on Clouds
  • Install automation orchestrator
Upgrade
  • Upgrade to Ansible Automation Platform 2.7
  • Determine your upgrade path
  • Infrastructure changes by deployment type
  • Pre-upgrade checklist
  • Authentication and access management changes when upgrading to 2.7
  • API changes in Ansible Automation Platform 2.7
  • Upgrade your containerized deployment of Ansible Automation Platform
  • Upgrade your Operator-based deployment of Ansible Automation Platform
    • Overview
    • Upgrade considerations
    • Prerequisites and channel upgrades
    • Upgrade the Ansible Automation Platform Operator
    • Patch update for Operator-based Ansible Automation Platform
  • Post-upgrade requirements
  • Upgrade metrics service
  • Upgrade Ansible automation portal
    • Ansible automation portal version compatibility
    • Export and preserve your Helm values
    • Choose an upgrade path
    • Download the plug-in TAR files (deprecated)
    • Update the plug-in registry (deprecated)
    • Upgrade the Helm release
    • Upgrade Ansible automation portal with OCI container delivery
    • Troubleshoot Ansible automation portal upgrades
    • Migrate from HTTP plug-in registry to OCI container delivery
    • Migrate in air-gapped and disconnected environments
    • Troubleshoot the migration
    • Upgrade the automation portal operator
  • Upgrade the Ansible automation portal RHEL appliance
  • Upgrade Ansible plug-ins for Red Hat Developer Hub
    • Upgrade the Ansible plug-ins for an Operator environment
    • Upgrade the Ansible plug-ins with Helm
    • Upgrade the Ansible plug-ins using OCI delivery
  • Upgrade the standalone automation dashboard utility
Migrate
  • Migrate from existing deployment topologies
  • Out of scope
  • Migration approaches and workflow
  • Migration prerequisites
    • Prerequisites for migrating using the aap_snapshot collection
    • Containerized to Managed Ansible Automation Platform migration prerequisites
  • What the aap_snapshot migration artifact contains
  • Prepare and export data from the source environment
    • Export a containerized deployment using the aap_snapshot collection
    • Export playbook variables reference
  • Prepare, configure, and validate the target environment
    • About the aap_snapshot import workflow
    • Import a deployment into OCP using the aap_snapshot collection
    • Import to a containerized deployment using the aap_snapshot collection
    • Import variables reference
    • Prepare to migrate to Managed Ansible Automation Platform
Administer
  • Define automation target hosts in your inventory files
    • Define a collection of hosts with Smart Inventories
    • Configure supported inventory plugin templates
    • Create dynamic groups with constructed inventories
    • Generate dynamic data from external sources with inventory plugins
    • Add a new inventory
    • Add a source to an inventory
    • Run ad hoc commands against a host in an inventory
    • Import your inventory file from source control
  • Define where automation runs with host and node groupings
    • Add new hosts as automation targets
    • Determine where automation runs with instance groups
    • Configure instance groups from the API
    • Control where automation runs with container groups
  • Scale automation across your infrastructure with automation mesh
    • Deprovision individual nodes or groups
  • Scale with automation mesh in an operator environment
    • Set up VMs for use in mesh
    • Run jobs on execution nodes
    • View details about mesh nodes with topology viewer
  • Scale with automation mesh in a containerized or VM environment
    • Edit the inventory file
    • Design patterns for mesh
  • Back up and restore your containerized deployment
  • Back up and restore in an OpenShift environment
    • About backup and recovery
    • Back up your Ansible Automation Platform deployment
    • Restore your Ansible Automation Platform deployment
  • Define, create, and build execution environments
    • Build a definition file
      • System
    • Create and integrate custom MCP Servers in execution environments
    • Disconnected environment customizations
    • Execution environment setup reference
    • Set up your container repository
    • Pull execution environments for use in Ansible Automation Platform
    • Secure your automation with container signing
  • Manage your organization's automation content
    • Sync automation content from remote repositories
      • Red Hat Certified, validated, and Ansible Galaxy content in automation hub
      • Configure automation hub tokens
      • Configure the rh-certified remote repository
      • Configure the private automation hub community remote
      • Configure proxy settings
      • Create a requirements file
      • Sync content collections
      • Control how many collection versions are synced
      • Configure content signing on private automation hub
  • Manage collection access and permissions with namespaces
    • Upload, group, and approve your organization’s content collections
    • Approve content for custom repositories in automation hub
    • Create a remote configuration in automation hub
      • Assign access to a remote configuration
      • Synchronize repositories in automation hub
  • Manage containers in your private automation hub
  • Configure and manage the Ansible Lightspeed code assistant for your organization
    • Administer the Ansible Lightspeed Service
    • View and manage Admin dashboard telemetry
  • Trigger automation from events with Event-Driven Ansible
    • Background task processing for Event-Driven Ansible
    • Organize rulebooks for event-driven automation
      • Set up a new project
      • Update revision on launch for projects
        • Cache Timeout in Event-Driven Ansible projects
      • Project and rulebook activation settings interdependencies
    • Create runtime environments for event-driven automation
    • Define rules that trigger automation from events
    • Manage active event-driven automation integrations
    • Reuse event-driven automation configurations
    • Activate webhook-based automation in Openshift
    • Audit pipeline-triggered automation activity
    • Troubleshoot failed event-driven automation triggers
      • Resolve event processing failures in rulebook activations
      • Troubleshoot actions that fail to trigger after receiving events
    • Respond to events from external systems
  • Automate actions by routing external event streams: User scenarios
    • Route GitHub event streams to rulebook activations
      • Prepare your GitHub repository and platform environment
      • Create a GitHub event stream credential
      • Create a GitHub event stream
      • Configure your remote system to send events through GitHub webhooks
      • Verify your GitHub event streams work
      • Replace sources and attach GitHub event streams to activations
      • Resend webhook data from your event stream type
      • Check the Rule Audit for events on your new event stream
  • Filter events before triggering automation
    • Author event filters
  • Use awx-manage to access automation controller information
Develop
  • Get started automating with playbooks
    • How do Ansible Playbooks work
    • Define which hosts to manage in an inventory file
    • Create a simple playbook to connect to managed hosts
    • Gather and display network device info with a playbook
    • Example: automate software updates
  • Create, test, and deploy automation content with ansible-dev-tools
    • Ansible development tools components and workflow
    • Auto-generate the structure and files for your automation project
    • Write your first automation task using the VS Code extension
    • Run your playbook automation to test behavior
    • Package and distribute automation content with collections
    • MCP server integration
      • Implement automation content for ephemeral MCP agents
  • Emulate a platform environment locally with automation content navigator
    • What is automation content navigator?
    • Run a playbook to display execution environment contents
    • Browse collections in a text-based format
    • View groups and hosts in your inventory
    • Run playbooks locally with automation content navigator
    • Troubleshoot collections, execution environments, and playbooks
    • Automation content navigator command reference
  • Search and filter resources
    • Search syntax
    • Search field values
    • Search related fields
    • Search limitations
    • Sorting results
  • Use jobs to run playbooks against an inventory of hosts
    • Sync inventory data with external sources
    • View output for your playbook job runs
    • Advanced configuration for jobs tied to source control management systems
  • Standardize and streamline automation with automation job templates
    • Create repeatable, shareable job templates to standardize automation runs
    • Set extra variables in job templates
    • Launch a job template
    • Associate cloud credentials with a job template
    • Increase capacity through cloud bursting by provisioning callbacks
    • Distribute automation across a large number of hosts with job slicing
  • Orchestrate complex automation with workflow job templates
    • Role-based access controls
    • Understand how to configure workflows
    • Create a workflow job template
    • Build a graphical workflow representation with workflow visualizer
    • Configure nodes in workflow visualizer
  • Schedule recurring automation
  • Logically group playbooks with projects
    • Add a new project
    • Manage playbooks manually
    • Configure playbooks to use source control management (SCM) systems
    • Configure collections from source management to run in a project
    • Configure project permissions
    • Enforce project integrity with signing and verification
  • Launch automation templates from Ansible automation portal
    • Sign in to Ansible automation portal
    • Configure custom SSL certificates for the Ansible automation portal
    • Set up permissions for custom self-service templates
    • Understanding auto-generated templates
      • What users see
      • Auto-generated template example
      • How templates are generated
    • Add and launch custom self-service templates
    • Use custom actions and UI components in Backstage Software Templates
    • Custom Backstage actions
    • Custom UI components and filters
    • Standard UI widgets
    • Parameter types and field options
      • Supported parameter types
      • AAP resource picker fields
    • Dynamic fields
      • Show or hide fields based on a toggle
      • Show different fields based on a selection
      • Chain multiple dynamic dependencies
    • Configure the output section
      • Output text
      • Output links
      • Reference parameters in output
      • Reference step output in output
    • View task run history
  • Streamline development by integrating Red Hat Developer Hub plug-ins
    • Streamline development by integrating Red Hat Developer Hub plug-ins
    • Dashboard navigation
    • Access learning paths, labs, and collections
    • Develop and execute projects in Dev Spaces
      • Discover existing Ansible content for RHEL system roles
  • Trigger automation with webhooks
  • Best practices for automation execution
  • Build execution environments with automation portal
    • Understand execution environment builder
      • Execution environment definition components
    • Set up execution environment builder
      • Prerequisites and planning
      • Configure collection discovery sources
      • Connect to GitHub
        • Configure a GitHub App for content discovery
        • Configure a Personal Access Token for GitHub content discovery
        • Configure a GitHub OAuth App for saving definitions
      • Connect to GitLab
        • Configure a Personal Access Token for GitLab content discovery
        • Configure a GitLab OAuth App for saving definitions
        • Configure automated image builds (GitLab CI)
      • Configure wizard templates
        • Enable cloud automation and network automation execution environment templates
        • Host execution environment wizard templates in a private Git repository
      • Create standardized execution environment templates for teams
      • Apply configuration changes
      • Synchronize content sources
      • Execution environment builder permissions
        • Grant execution environment builder access to a role
    • Create and manage execution environments
      • Discover and manage execution environments and collections
        • Browse the execution environment catalog
        • Execution environment definition detail page
        • Build an execution environment image from the catalog
        • Delete or unregister an execution environment definition
        • Browse and view collections
      • Create an execution environment definition using the UI wizard
    • Execution environment builder reference
      • Complete Helm chart values reference for execution environment builder
      • Complete execution environment template reference
      • Execution environment builder custom UI components
  • Access preconfigured development tools with Ansible development workspaces
  • Create and launch an Ansible development workspace
  • Develop automation content in your workspace
  • Delete an Ansible development workspace
  • Build automation faster with Red Hat Ansible Lightspeed code assistant
    • Understand Red Hat Ansible Lightspeed with IBM watsonx Code Assistant
    • Quick start for administrators
    • Quick start for developers
    • Start a trial of Red Hat Ansible Lightspeed
    • Set up Red Hat Ansible Lightspeed for your organization
    • Set up Red Hat Ansible Lightspeed cloud service
    • Set up Red Hat Ansible Lightspeed on-premise deployment
    • Install the Red Hat Ansible Automation Platform operator
    • Develop Ansible content
    • Install and configure the Ansible VS Code extension
      • Configure the Ansible VS Code extension for a containerized deployment
        • Configure a wildcard OAuth redirect URI for OpenShift Dev Spaces
    • Enable AI features in the Ansible extension for VS Code
      • Enable the MCP server through the VS Code command palette
      • Enable the MCP server through the VS Code settings menu
      • Disable the MCP server
      • Set up your development environment to use the MCP server
      • Install Ansible Development Tools with the AI assistant
      • Configure Ansible DevTools and the development environment
      • Manage your Ansible dev environment
      • Scaffold an Ansible project with the AI assistant
      • Validate and debug with the AI assistant
      • Create and validate an execution environment with the assistant
      • Run playbooks with ansible-navigator using the assistant
    • Create task recommendations
    • Create playbooks and view playbook explanations
    • Create roles and view roles explanations
    • View the audit logs
    • Provide feedback on the Ansible Lightspeed service
    • Administer the Ansible Lightspeed Service
    • View and manage Admin dashboard telemetry
    • Troubleshoot Red Hat Ansible Lightspeed configuration errors
Configure
  • Configure Ansible Automation Platform
    • Configure subscriptions
    • Platform gateway
    • Enable OAuth2 token creation for external users
    • Configure miscellaneous options
    • Understanding the platform gateway OpenAPI specification
    • Access the interactive documentation (Rendered access)
    • Manage feature flags
    • View feature flags in your user interface
    • User preferences
  • Distribute workloads with clustering
    • Planning your cluster environment
  • Configure supported inventory plugin templates
  • Configure static storage for Ansible Automation Platform
  • Configuration as Code with the ansible.platform collection
  • Set up your automation environment for Configuration as Code
  • Modules in the ansible.platform collection
  • Configuration as Code migration guide for Ansible Automation Platform 2.7
  • Configure a proxy to communicate with external systems
    • Configure proxy support to manage network configuration
    • Configure proxy servers for egress traffic
    • Configure proxy settings for Event-Driven Ansible
    • Configure proxy settings for automation mesh
    • Configure operator-based Ansible Automation Platform to use egress proxy
Secure
  • Configure central authentication for Ansible Automation Platform
    • Mandatory platform gateway authentication in Ansible Automation Platform 2.7
    • Pluggable authentication
    • Configuration notes for all authentication types
    • Configure an authentication type to simplify user logins
      • Configure local authentication
      • Configure LDAP authentication
      • Configure SAML authentication
      • Configure TACACS+ authentication
      • Configure Microsoft Entra ID authentication
      • Configure Google OAuth2 authentication
      • Configure RADIUS authentication
      • Configure generic OIDC authentication
      • Enable debugging for enterprise authentication
      • Configure keycloak authentication
      • Configure GitHub authentication
      • Configure GitHub organization authentication
      • Configure GitHub team authentication
      • Configure GitHub enterprise authentication
      • Configure GitHub enterprise organization authentication
      • Configure GitHub enterprise team authentication
    • User and external authentication mapping
      • Email address modification restrictions
      • Override email modification restrictions
      • Audit email address modifications
    • Map external authenticators to Ansible Automation Platform
    • Locate and manage authentication configurations
    • Configure Google Cloud for increased authentication performance
    • Configure access to external applications with tokens
      • Get started with OAuth Applications
      • Create a new application
      • Create, revoke, or clear tokens
      • Personal Access Token removal in Ansible Automation Platform 2.7
      • Security settings for OAuth2 tokens and external users
      • Configure platform gateway route timeouts
  • Manage access with role-based access control
    • Structure groups and resources with organizations
      • Create an organization
      • Manage access to organizations
    • Assign notifiers and execution environments to organizations
    • Bulk-assign roles to users with teams
    • View, create, or assign roles to users
    • Manage user access to resources
    • View, create, and assign roles to grant user access to resources
    • Configure an external secret management system for automation
      • Configuring and linking secret lookups
      • Metadata for credential input sources
      • Integrate third-party secret management systems
  • Understand secret handling
  • Configure automation hub tokens
  • Configure credentials to authenticate remote systems and services
    • How credentials work
      • Create new credentials
      • Add new users and job templates to existing credentials
    • Credential types
      • Amazon Web Services credential type
      • Ansible Galaxy or automation hub API token credential type
      • AWS secrets manager lookup
      • BitBucket data center HTTP access token
      • Centrify Vault Credential Provider Lookup credential type
      • Container registry credential type
      • CyberArk Central Credential Provider Lookup credential type
      • CyberArk Conjur Secrets Manager Lookup credential type
      • GitHub Personal Access Token credential type
      • GitLab Personal Access Token credential type
      • Google Compute Engine credential type
        • Access Google Compute Engine credentials in an Ansible Playbook
      • GPG Public Key credential type
      • HashiCorp Vault Secret Lookup credential type
      • HashiCorp Vault Signed SSH credential type
      • Red Hat Lightspeed credential type
      • Access machine credentials in an ansible playbook
        • Using Machine and Network credentials together
      • Microsoft Azure Key Vault credential type
      • Microsoft Azure Resource Manager credential type
      • Network credential type
      • OpenShift or Kubernetes API Bearer Token credential type
      • OpenStack credential type
      • Red Hat Ansible Automation Platform credential type
      • Red Hat Satellite 6 credential type
      • Red Hat Virtualization credential type
      • Source Control credential type
      • Terraform: Backend configuration
      • Terraform: HCP Terraform credential type
      • Thycotic DevOps Secrets Vault credential type
      • Thycotic secret server credential type
      • Ansible Vault credential type
      • VMware vCenter credential type
    • Use automation controller credentials in a playbook
    • Custom credential types
    • Add new users and job templates to existing credentials
    • Getting started with credential types
  • Configure credentials for Event-Driven Ansible
    • Set up credentials
    • Connect to external secret management systems with built-in credentials
    • Create custom credentials for Event-Driven Ansible
      • Create a new credential type
      • Event-Driven Ansible Rule Engine credential type
        • Create an Event-Driven Ansible Rule Engine credential
        • Assign your new Event-Driven Ansible Rule Engine credential type to rulebook activations
  • Authenticate through the API
    • Use session authentication
    • Basic authentication removal
    • OAuth 2 token authentication
    • Single sign-on authentication
  • Renew and change SSL/TLS certificates
    • Container-based installations
    • Operator-based installations
    • Configure a CA file
  • Harden the platform security posture
    • Plan your topology and networking configuration
    • Manage platform credentials
    • Understand how Ansible Automation Platform manages secrets
    • Best practices for securing user accounts
    • Best practices for setting up secure logging
    • Apply the NIST Cybersecurity Framework
    • Secure your Red Hat Enterprise Linux hosts
    • Installation settings to secure your platform
    • Ensure compliance with host-level security controls
    • Recommended security practices for access controls
    • RBAC security considerations for day two operations
    • Disaster recovery and operational continuity
    • Integrate with HashiCorp to secure sensitive data
    • Improve the security of nodes managed by Ansible Automation Platform
    • Automate nodes that comply with security profiles
  • Manage firewall policies and rules with security automation
  • Automate network intrusion detection and prevention systems
  • Security automation use cases
    • Red Hat Ansible Automation Platform as part of a Security Operations Center
    • Automate software patching
    • Configure automatic security reactions with Event-Driven Ansible
    • Case study with F5 example
    • Example: Use F5 with Event-Driven Ansible
  • Configure role-based access control for Ansible automation portal
Observe
  • Ensure system health and efficiency through monitoring
  • Generate consumption-based billing reports with the metrics-utility
    • Configure the metrics-utility
    • Configure a monthly usage report
    • Configure the metrics-utility to run at specific times
    • Specify where to store consumption-based reports
    • Configure options for the Certified Cloud and Service Provider report (CCSPv2)
    • Configure options in the RENEWAL_GUIDANCE report
    • Original Certified Cloud and Service Provider (CCSP) report
    • How to deduplicate host data in reports
  • View activity streams for all resources
  • Understand and configure notifications
    • Create a notification template
    • Advanced notification settings
  • Access log information
  • Send log files to third-party aggregation services
    • Configure logging components
    • Configure third-party services
  • Send metrics to system monitoring software
  • Configure logging for Event-Driven Ansible
  • Capture telemetry data for Ansible plug-ins for Red Hat Developer Hub
  • Capture telemetry data for the Ansible self-service portal
    • Configure automation dashboard post-installation
      • Configure data retention for automation dashboard
      • Monitor data collection status for automation dashboard
      • Export automation dashboard data to CSV
      • Filter automation dashboard by date range
      • Historical data backfill details
Integrate
  • Integrate with IBM HashiCorp Terraform
    • About the Terraform integration
    • Use hashicorp.terraform
    • Integrate with the cloud.terraform collection
    • Migrate from cloud.terraform to hashicorp.terraform
    • Migrate from the Terraform community edition
    • Integrate from Terraform
      • Configure the provider
      • Dynamically override execution settings
      • Use TF Actions and Ansible Automation Platform
        • About Terraform Actions and Ansible Automation Platform
        • Use TF Actions as a direct job
        • Use TF Actions with Event-Driven Ansible
  • Integrate with IBM HashiCorp Vault
    • Authenticate to hashicorp.vault
    • Migrate from community.hashi_vault
      • Configure KV1 modules
      • Configure KV2 modules
    • Manage database secrets with hashicorp.vault
  • Integrate with Microsoft Windows
    • Establish a well architected environment
    • Connect securely to Windows hosts
      • PowerShell Remoting Protocol (PSRP)
      • OpenSSH for Windows
      • Legacy WinRM
      • Configure Kerberos for domain-joined environment
    • Authenticate the Windows user
      • WinRM authentication methods
      • Protect Windows credentials in automated workflows
      • Validate Windows security baselines and verify readiness
  • Integrate with the external policy engine Open Policy Agent (OPA)
    • Implement policy enforcement
    • Configure enforcement points
    • Policy enforcement input and output options
  • Integrate with Red Hat Lightspeed for vulnerability management
Optimize
  • Optimize platform performance
  • Workload types and access methods
  • Vertically scale tested deployment models to improve performance
  • Horizontally scale tested deployment models to improve performance
  • Horizontally scale in Event-Driven Ansible
  • Performance tuning for operator environments
    • Introduction
    • Customize pod specifications to improve performance
    • Manage resources for pods and containers
    • Adjust the control plane to tune performance
    • Specify dedicated nodes for pods and job execution
    • How job capacity is determined and impacts job runs
    • Job type impact on capacity
    • Fine-tune Receptor worker backoff strategies for API reliability
  • Scale up to an enterprise topology
  • Tune automation controller to improve performance
    • Capacity plan for node types and workload characteristics
    • Example capacity planning exercise
    • Understand primary workloads for automation controller
    • Manage live event streams to the UI
    • Capacity settings for each node type
  • Tune the PostgreSQL database for optimal performance
  • Tune performance for Event-Driven Ansible
  • Get insights on automation across your environment with Automation Analytics
    • Plan, track, and analyze returns with automation savings planner
    • Get a comprehensive visual overview of automation with reports
    • View data about automation jobs across your organization
    • Change your Automation Analytics settings
    • Details about data collected for Automation Analytics
    • View automation job metrics with automation dashboard
    • Inventory file variables for the standalone automation dashboard utility
  • Manage analytics and data collection in Ansible Automation Platform
  • Optimize request timeouts
Extend
  • Deploy the MCP server on Ansible Automation Platform
    • Overview
    • Deployment methods for the MCP server
    • Deploy the MCP server for Red Hat Ansible Automation Platform on a container-based installation
    • Deploy the MCP server for Red Hat Ansible Automation Platform on an operator-based installation
    • Deploy the MCP server as a standalone container
      • Enable TLS for the standalone MCP server
      • Standalone MCP server configuration reference
  • Authenticate with the MCP server
    • Authenticate with a personal access token
    • Enable OAuth 2.1 on the MCP server
    • Connect an MCP client with OAuth 2.1
    • OAuth 2.1 settings for the MCP server
    • Connect an AI agent to the MCP server
    • Troubleshoot MCP server errors
  • Deploy the automation intelligent assistant
    • ANSIBLE_BASE_JWT_VALIDATE_CERT default change for Red Hat Ansible Lightspeed
      • Configure ANSIBLE_BASE_JWT_VALIDATE_CERT
    • Deploy the automation intelligent assistant on OpenShift Container Platform
      • Overview
      • Create a chatbot configuration secret
      • Update the YAML file of the Ansible Automation Platform operator
      • Change your LLM model
    • Deploy the automation intelligent assistant on containerized Ansible Automation Platform
      • Overview
      • Change your LLM model
      • Configure Red Hat Ansible Lightspeed variables
        • Understand the provider configuration variable
        • Provider configuration values
        • Troubleshoot: Chat interface does not appear
      • Red Hat Ansible Lightspeed variables
    • Use the automation intelligent assistant
  • Disable or remove the automation intelligent assistant
    • Disable the automation intelligent assistant on an operator-based deployment
    • Remove the automation intelligent assistant from a containerized deployment
    • Re-enable the automation intelligent assistant
  • Extend the automation intelligent assistant with custom knowledge
    • Prepare your documentation
    • Build a searchable knowledge base image from your documentation
    • Verify the vector database
    • Publish your image to a container registry
    • Deploy your custom image to a container-based installation
    • Deploy your custom image to an operator-based installation
    • Get organization-specific answers from the intelligent assistant
    • Keep your custom knowledge current
    • Troubleshooting BYOK for the intelligent assistant
      • Bring your own knowledge frequently asked questions
  • Ansible plug-ins for Red Hat Developer Hub
    • About Red Hat Developer Hub
    • Ansible plug-ins for Red Hat Developer Hub
    • Prerequisites
    • Install the Ansible plug-ins
    • Configure the Ansible plug-ins
    • Optional configuration
    • Uninstall the Ansible plug-ins
    • Full configuration examples
    • Install Ansible plug-ins using an HTTP plug-in registry (deprecated)
    • Migrate from HTTP plug-in registry to OCI container delivery
    • Remove the Ansible sidebar navigation item
Troubleshoot
  • Access troubleshooting information in the UI
  • Collect configuration and diagnostic information
  • Troubleshoot your containerized deployment
  • Troubleshoot your Operator-based deployment of Ansible Automation Platform
  • Troubleshoot automation controller
    • External system interference and job failures
    • External system interference and job failures: mitigation
  • Troubleshoot Kerberos
  • Troubleshoot metrics service
    • Recover metrics service after reinstallation
  • Troubleshoot automation dashboard
  • Troubleshooting RHEL appliances
  • Troubleshoot Ansible automation portal authentication
  • Troubleshoot execution environment builder
    • View Ansible automation portal logs for execution environment builder
  • Troubleshoot your portal operator deployment
Reference
  • Ansible Automation Platform custom resources
    • AnsibleAutomationPlatform [aap.ansible.com/v1alpha1]
    • AnsibleAutomationPlatformBackup and AnsibleAutomationPlatformRestore [aap.ansible.com/v1alpha1]
    • Automation controller custom resources
    • Automation hub custom resources
    • Ansible Lightspeed custom resources
    • Event-Driven Ansible custom resources
    • Resource Operator custom resources
Download PDF
  • Ansible Automation Platform 2.7 PDF Reference
Legal Notices
  • Legal notice
  • Additional notices for Ansible Automation Platform
  1. Home
  2. Products
  3. Red Hat Ansible Automation Platform
  4. 2.7
  5. Install on OpenShift Container Platform
  6. Manage Ansible Automation Platform subscriptions, updates, and support
  7. Node counting in subscriptions

Node counting in subscriptions

Open Table of contents
We've streamlined our documentationTo make things easier to find, you can now access all the documentation for this version using the table of contents on this page. You can also browse the topics below, use search, or try Ask Red Hat. Read more about the changes here.

Node counting in subscriptions

The Ansible Automation Platform subscription defines the number of Managed Nodes that can be managed as part of your subscription.

For more information about managed node requirements for subscriptions, see How are "managed nodes" defined as part of the Red Hat Ansible Automation Platform offering.

Note

Ansible does not recycle node counts or reset automated hosts.

Trial and evaluation
Subscription Types
Back to top
Red Hat logoGithubRedditYoutubeTwitter

Learn

  • Developer resources
  • Cloud learning hub
  • Interactive labs
  • Training and certification
  • Customer support
  • See all documentation

Try, buy, & sell

  • Product trial center
  • Red Hat Ecosystem Catalog
  • Red Hat Store
  • Buy online (Japan)

Communities

  • Customer Portal Community
  • Events
  • How we contribute

About Red Hat

We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

Making open source more inclusive

Red Hat is committed to replacing problematic language in our code, documentation, and web properties. For more details, see the Red Hat Blog.

About Red Hat Documentation

We help Red Hat users innovate and achieve their goals with our products and services with content they can trust. Explore our recent updates.

Legal Notice

Theme

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2026 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility
Back to top