Aap setup demo

AAP Setup Demo Skill

This skill bootstraps a fresh Ansible Automation Platform instance and then launches the Setup - AAP - CAC job template — making the setup process itself a live demo story for a customer.

Overview

This skill extends /aap-bootstrap with one additional step: after bootstrap completes it launches Setup - AAP - CAC in AAP and monitors the job until completion.

The full sequence:

1. Preflight — verify local prerequisites and check AAP bootstrap state
2. Bootstrap AAP if needed (Hub creds, Vault cred, project, job template)
3. Launch Setup - AAP - CAC from AAP
4. Monitor and report job status

Preflight Check — Part 1: Local Prerequisites

Before doing anything else, verify local prerequisites are in place:

# ansible.cfg with Hub token
grep -q "galaxy_server.rh_certified" ~/.ansible/ansible.cfg 2>/dev/null && \
  grep -v "PASTE_YOUR_TOKEN_HERE" ~/.ansible/ansible.cfg | grep -q "token=" && \
  echo "✅ ansible.cfg" || echo "❌ ansible.cfg"

# secrets2
test -s ~/.ansible/secrets2 && echo "✅ secrets2" || echo "❌ secrets2"

# collections
test -d ./collections/ansible_collections/ansible/platform && \
  echo "✅ ansible.platform" || echo "❌ ansible.platform"

test -d ./collections/ansible_collections/ansible/controller && \
  echo "✅ ansible.controller" || echo "❌ ansible.controller"

# all.yml user vars
python3 -c "
import yaml, sys
try:
    d = yaml.safe_load(open('inventories/rhdp-sample-demo/group_vars/all.yml'))
    missing = [k for k in ['my_vault','my_remote_vault','my_remote_ssh_pub_key'] if not d.get(k,'')]
    if missing:
        print('❌ all.yml missing: ' + ', '.join(missing))
    else:
        print('✅ all.yml user vars')
except FileNotFoundError:
    print('❌ all.yml — inventories/rhdp-sample-demo/group_vars/all.yml not found')
"

If any check fails, stop immediately:

❌ Prerequisites missing: <list each failing item>

Run /aap-first-time to set up these prerequisites before continuing.

Preflight Check — Part 2: AAP Bootstrap State

Resolve AAP credentials using the same priority order as /aap-bootstrap (env vars → ansible.cfg → prompt). Then check whether AAP has already been bootstrapped:

# Check for project
PROJECT_COUNT=$(curl -s -k \
  -u $CONTROLLER_USERNAME:$CONTROLLER_PASSWORD \
  "$CONTROLLER_HOST/api/controller/v2/projects/?name=aap.as.code" \
  | python3 -c "import sys,json; print(json.load(sys.stdin)['count'])")

# Check for job template
JT_COUNT=$(curl -s -k \
  -u $CONTROLLER_USERNAME:$CONTROLLER_PASSWORD \
  "$CONTROLLER_HOST/api/controller/v2/job_templates/?name=Setup+-+AAP+-+CAC" \
  | python3 -c "import sys,json; print(json.load(sys.stdin)['count'])")

• If both exist (PROJECT_COUNT >= 1 and JT_COUNT >= 1): tell the user "AAP is already bootstrapped — skipping to job launch" and jump directly to Step 7.
• If either is missing: proceed through Steps 1–6 to run the bootstrap first.

AAP API Paths (2.5+)

AAP 2.5+ uses a gateway architecture. Full endpoint list is in skills/references/aap-as-code-context.md. This skill uses:

Purpose	Base path
Token create/delete	$CONTROLLER_HOST/api/gateway/v1/tokens/
Job templates	$CONTROLLER_HOST/api/controller/v2/job_templates/
Jobs	$CONTROLLER_HOST/api/controller/v2/jobs/

Steps 1–6: Bootstrap First

Follow all steps from the /aap-bootstrap skill exactly (credential resolution, inventory generation, playbook execution).

Do not proceed to Step 7 until the bootstrap playbook exits successfully.

Step 7 — Launch Setup - AAP - CAC

After a successful bootstrap, launch the job template via the AAP API.

First, create a session token via the gateway:

TOKEN_JSON=$(curl -s -k -X POST \
  -H "Content-Type: application/json" \
  -u $CONTROLLER_USERNAME:$CONTROLLER_PASSWORD \
  "$CONTROLLER_HOST/api/gateway/v1/tokens/" \
  -d '{"description":"setup-demo token","scope":"write"}')

TOKEN=$(echo $TOKEN_JSON | python3 -c "import sys,json; d=json.load(sys.stdin); print(d['token'])")
TOKEN_ID=$(echo $TOKEN_JSON | python3 -c "import sys,json; d=json.load(sys.stdin); print(d['id'])")

Get the job template ID and launch it:

# Get the job template ID
JT_ID=$(curl -s -k \
  -H "Authorization: Bearer $TOKEN" \
  "$CONTROLLER_HOST/api/controller/v2/job_templates/?name=Setup+-+AAP+-+CAC" \
  | python3 -c "import sys,json; print(json.load(sys.stdin)['results'][0]['id'])")

# Launch it
JOB_ID=$(curl -s -k \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -X POST "$CONTROLLER_HOST/api/controller/v2/job_templates/$JT_ID/launch/" \
  | python3 -c "import sys,json; print(json.load(sys.stdin)['id'])")

Show the job URL to the user:

$CONTROLLER_HOST/#/jobs/$JOB_ID/output

Step 8 — Monitor the Job

Poll the job status every 15 seconds:

curl -s -k \
  -H "Authorization: Bearer $TOKEN" \
  "$CONTROLLER_HOST/api/controller/v2/jobs/$JOB_ID/" \
  | python3 -c "import sys,json; j=json.load(sys.stdin); print(j['status'], j.get('finished','running'))"

Report status updates to the user. Stop polling when status is successful or failed.

Step 9 — Clean Up Token

Always delete the session token after the job completes or fails:

curl -s -k -X DELETE \
  -H "Authorization: Bearer $TOKEN" \
  "$CONTROLLER_HOST/api/gateway/v1/tokens/$TOKEN_ID/"

Step 10 — Report Results

On success:

• Confirm that Setup - AAP - CAC completed
• Tell the user AAP is fully configured and the demo is ready to run

On failure:

• Show the job failure message
• Provide the direct link to the job output in AAP for troubleshooting